last executing test programs: 5.734114711s ago: executing program 4 (id=1718): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe, &(0x7f0000000080), &(0x7f0000000280)=0x4) 5.062434282s ago: executing program 3 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.062206856s ago: executing program 4 (id=1724): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040600) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 4.856468003s ago: executing program 4 (id=1726): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x4008031, 0xffffffffffffffff, 0x9ec5b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.702051683s ago: executing program 1 (id=1727): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @dev}, 0xfffffffe}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 4.531021663s ago: executing program 1 (id=1728): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @multicast2}, {0x1}, 0x14, {0x2, 0x4e23, @loopback}, 'team_slave_1\x00'}) 3.719669075s ago: executing program 3 (id=1730): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x9b, &(0x7f0000000380)={0x0, 0x4000000, 0x400, 0x0, 0x1a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x2004, @fd, 0x1, 0x0, 0x0, 0x15}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x9, 0x4) sendmmsg$sock(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000003c0)="83", 0x1}], 0x1}}], 0x2, 0x40000) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000080)) 3.489752795s ago: executing program 1 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chdir(0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 3.076186841s ago: executing program 2 (id=1732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "3f9c85bafefd1c60", "7ae4bf80a2690ec333c16319d188acad", "62d68a2c", "10da2521f4db9077"}, 0x28) 2.884911499s ago: executing program 1 (id=1733): r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x400002, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.658068383s ago: executing program 0 (id=1734): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) 2.657761081s ago: executing program 2 (id=1735): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 2.417145528s ago: executing program 3 (id=1736): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="d400308014000400403a050c5baee20046f2b6d713459a7a040001800500020000000000780001800800010001"], 0xf0}}, 0x0) 2.18567935s ago: executing program 3 (id=1737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 2.110200342s ago: executing program 4 (id=1738): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2.00473958s ago: executing program 3 (id=1739): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) membarrier(0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7b8, &(0x7f0000001880)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 1.835094213s ago: executing program 0 (id=1740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.666372812s ago: executing program 1 (id=1741): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10022d30, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) time(&(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.66360005s ago: executing program 2 (id=1742): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.505927408s ago: executing program 0 (id=1743): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x3fb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") 1.434113388s ago: executing program 4 (id=1744): unshare(0x20000400) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0xecb1, 0x9b, 0x0, 0x11a}, {0x7, 0x0, 0x6, 0x80}]}, 0x10) 1.194349468s ago: executing program 2 (id=1745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) 817.798597ms ago: executing program 4 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x0) 810.471749ms ago: executing program 3 (id=1747): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 733.759034ms ago: executing program 0 (id=1748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x140a, 0x8, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x40880) sysinfo(&(0x7f0000000400)=""/125) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="6220b4"], 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020"]) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a0000004e8eb368f0f5c123e1135494bfbec7c4b6f44b", @ANYRES32, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="2b64657669636573207b706572665f6576656e74202b6e65964e9bcac5f49d21db993fc1745f636c7320"], 0x1e) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r9, &(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0x2) 666.662447ms ago: executing program 2 (id=1749): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 476.826133ms ago: executing program 1 (id=1750): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c", 0x2f}], 0x1}}], 0x1, 0x0) 242.588825ms ago: executing program 2 (id=1751): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r0}, 0x9) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010400"/20, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3], 0xa4}}, 0x0) 152.44156ms ago: executing program 0 (id=1752): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x2040600) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 0s ago: executing program 0 (id=1753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x80) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .3.908': attribute type 21 has an invalid length. [ 420.728564][ T8417] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 420.736787][ T8420] Invalid ELF header magic: != ELF [ 420.743766][ T8417] netlink: 144 bytes leftover after parsing attributes in process `syz.3.908'. [ 420.838436][ T8420] loop1: detected capacity change from 0 to 1024 [ 421.293245][ T8420] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 421.338474][ T8420] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 421.382683][ T8420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 421.390040][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 421.444191][ T8420] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 421.486118][ T29] audit: type=1326 audit(1735356129.277:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8431 comm="syz.4.916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x0 [ 421.510809][ T8420] EXT4-fs (loop1): Remounting filesystem read-only [ 421.518707][ T8420] Quota error (device loop1): write_blk: dquota write failed [ 421.526697][ T8420] Quota error (device loop1): write_blk: dquota write failed [ 421.534802][ T8420] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 421.545087][ T8420] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 421.554297][ T8420] EXT4-fs (loop1): 1 orphan inode deleted [ 421.575492][ T8420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 422.135905][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.521210][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 422.531207][ T8446] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 422.540422][ T8446] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 422.624617][ T8443] loop0: detected capacity change from 0 to 2048 [ 422.748001][ T8443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.878000][ T8455] loop1: detected capacity change from 0 to 256 [ 422.920071][ T8452] loop4: detected capacity change from 0 to 1024 [ 422.937127][ T8443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.921'. [ 422.946653][ T8443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.921'. [ 422.985870][ T8452] EXT4-fs: Ignoring removed orlov option [ 422.992275][ T8452] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.998677][ T8455] FAT-fs (loop1): Directory bread(block 64) failed [ 423.006358][ T8455] FAT-fs (loop1): Directory bread(block 65) failed [ 423.013713][ T8455] FAT-fs (loop1): Directory bread(block 66) failed [ 423.020482][ T8455] FAT-fs (loop1): Directory bread(block 67) failed [ 423.027642][ T8455] FAT-fs (loop1): Directory bread(block 68) failed [ 423.034627][ T8455] FAT-fs (loop1): Directory bread(block 69) failed [ 423.041550][ T8455] FAT-fs (loop1): Directory bread(block 70) failed [ 423.048615][ T8455] FAT-fs (loop1): Directory bread(block 71) failed [ 423.055708][ T8455] FAT-fs (loop1): Directory bread(block 72) failed [ 423.062628][ T8455] FAT-fs (loop1): Directory bread(block 73) failed [ 423.165654][ T8455] netlink: 348 bytes leftover after parsing attributes in process `syz.1.923'. [ 423.193563][ T8452] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 423.245183][ T8452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.300086][ T8461] Process accounting resumed [ 423.305409][ T8461] syz.1.923: attempt to access beyond end of device [ 423.305409][ T8461] loop1: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 423.457449][ T8461] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 326) [ 423.466692][ T8461] FAT-fs (loop1): Filesystem has been set read-only [ 424.005478][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.018244][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.736687][ T8468] loop4: detected capacity change from 0 to 512 [ 424.763279][ T8468] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 424.958230][ T8468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.124157][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 425.205639][ T8486] syzkaller0: entered allmulticast mode [ 425.255661][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 425.293067][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 425.344367][ T29] audit: type=1326 audit(1735356133.077:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8478 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 425.391060][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 425.440340][ T29] audit: type=1326 audit(1735356133.207:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8478 comm="syz.2.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 425.523479][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 425.630916][ T8485] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.929: path /186/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 425.636436][ T8467] syzkaller0: left allmulticast mode [ 425.993129][ T5784] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 426.197584][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.315361][ T8503] loop0: detected capacity change from 0 to 512 [ 426.427274][ T8503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.441256][ T8503] ext4 filesystem being mounted at /194/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.742527][ T29] audit: type=1800 audit(1735356134.517:151): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.939" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 426.858711][ T8511] loop4: detected capacity change from 0 to 512 [ 427.005826][ T8517] loop1: detected capacity change from 0 to 256 [ 427.025268][ T8511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.038988][ T8511] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.187204][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.294054][ T8511] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 427.520243][ T8517] FAT-fs (loop1): Directory bread(block 64) failed [ 427.527403][ T8517] FAT-fs (loop1): Directory bread(block 65) failed [ 427.535394][ T8517] FAT-fs (loop1): Directory bread(block 66) failed [ 427.542293][ T8517] FAT-fs (loop1): Directory bread(block 67) failed [ 427.549309][ T8517] FAT-fs (loop1): Directory bread(block 68) failed [ 427.556219][ T8517] FAT-fs (loop1): Directory bread(block 69) failed [ 427.563350][ T8517] FAT-fs (loop1): Directory bread(block 70) failed [ 427.570119][ T8517] FAT-fs (loop1): Directory bread(block 71) failed [ 427.577133][ T8517] FAT-fs (loop1): Directory bread(block 72) failed [ 427.584037][ T8517] FAT-fs (loop1): Directory bread(block 73) failed [ 427.643973][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.937'. [ 427.737837][ T8517] syz.1.942: attempt to access beyond end of device [ 427.737837][ T8517] loop1: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 427.752293][ T8517] syz.1.942: attempt to access beyond end of device [ 427.752293][ T8517] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 427.767728][ T29] audit: type=1800 audit(1735356135.567:152): pid=8517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.942" name="file1" dev="loop1" ino=1048605 res=0 errno=0 [ 427.814520][ T8517] syz.1.942: attempt to access beyond end of device [ 427.814520][ T8517] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 427.831741][ T8517] syz.1.942: attempt to access beyond end of device [ 427.831741][ T8517] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 427.845586][ T8517] Buffer I/O error on dev loop1, logical block 442, async page read [ 427.893646][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.141239][ T8529] loop4: detected capacity change from 0 to 256 [ 429.113339][ T8534] loop1: detected capacity change from 0 to 512 [ 429.197936][ T8534] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.335809][ T8534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.425099][ T8529] FAT-fs (loop4): Directory bread(block 64) failed [ 429.432326][ T8529] FAT-fs (loop4): Directory bread(block 65) failed [ 429.439282][ T8529] FAT-fs (loop4): Directory bread(block 66) failed [ 429.447968][ T8529] FAT-fs (loop4): Directory bread(block 67) failed [ 429.455136][ T8529] FAT-fs (loop4): Directory bread(block 68) failed [ 429.462047][ T8529] FAT-fs (loop4): Directory bread(block 69) failed [ 429.468974][ T8529] FAT-fs (loop4): Directory bread(block 70) failed [ 429.476078][ T8529] FAT-fs (loop4): Directory bread(block 71) failed [ 429.483151][ T8529] FAT-fs (loop4): Directory bread(block 72) failed [ 429.489936][ T8529] FAT-fs (loop4): Directory bread(block 73) failed [ 429.694365][ T8541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.947: path /183/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 430.680412][ T8541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.947: path /183/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 430.947920][ T8534] syzkaller0: entered allmulticast mode [ 431.091375][ T8541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.947: path /183/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 431.290315][ T8541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.947: path /183/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 431.477957][ T8541] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.947: path /183/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 431.627654][ T8533] syzkaller0: left allmulticast mode [ 431.936524][ T8563] netlink: 3 bytes leftover after parsing attributes in process `syz.4.957'. [ 431.946269][ T8563] 0ªX¹¦À: renamed from caif0 [ 431.972403][ T8563] 0ªX¹¦À: entered allmulticast mode [ 431.975696][ T5792] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 431.977778][ T8563] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 432.056407][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.623534][ T8574] Invalid ELF header magic: != ELF [ 432.714339][ T8580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.942882][ T8576] loop4: detected capacity change from 0 to 1024 [ 433.035326][ T8576] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 433.132319][ T8576] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 433.141271][ T8576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 433.277260][ T8570] loop0: detected capacity change from 0 to 8192 [ 433.304293][ T8576] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 433.363425][ T8576] EXT4-fs (loop4): Remounting filesystem read-only [ 433.377071][ T8590] loop3: detected capacity change from 0 to 512 [ 433.385189][ T8576] Quota error (device loop4): write_blk: dquota write failed [ 433.393407][ T8576] Quota error (device loop4): write_blk: dquota write failed [ 433.401417][ T8576] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 433.411723][ T8576] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 433.420990][ T8576] EXT4-fs (loop4): 1 orphan inode deleted [ 433.543358][ T8590] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 433.555885][ T8576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 433.579085][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 433.636400][ T8590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.910867][ T29] audit: type=1326 audit(1735356141.697:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 433.993619][ T29] audit: type=1326 audit(1735356141.727:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 434.016328][ T29] audit: type=1326 audit(1735356141.747:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8600 comm="syz.2.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 434.063635][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 434.154292][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 434.230197][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 434.266709][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.372603][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 434.423230][ T8606] syzkaller0: entered allmulticast mode [ 434.510253][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 434.573424][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 434.602074][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 17: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 434.684606][ T8602] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #2: block 18: comm syz.3.969: lblock 23 mapped to illegal pblock 18 (length 1) [ 434.732727][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 19: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 434.808752][ T8602] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 20: comm syz.3.969: path /199/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 434.915257][ T8589] syzkaller0: left allmulticast mode [ 435.344284][ T5782] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 435.415215][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.016325][ T8635] loop4: detected capacity change from 0 to 1024 [ 436.091132][ T8635] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 436.196175][ T8635] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 436.226910][ T8635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 436.292753][ T8643] ip6gre1: entered allmulticast mode [ 436.418497][ T8635] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 436.557667][ T8649] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 436.599109][ T8649] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 436.670088][ T8635] EXT4-fs (loop4): Remounting filesystem read-only [ 436.678266][ T8635] Quota error (device loop4): write_blk: dquota write failed [ 436.686468][ T8635] Quota error (device loop4): write_blk: dquota write failed [ 436.695914][ T8635] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 436.707198][ T8635] EXT4-fs (loop4): 1 orphan inode deleted [ 436.720239][ T8635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 436.765431][ T8651] loop0: detected capacity change from 0 to 512 [ 436.806284][ T8651] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 436.940097][ T8651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.149558][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 437.281605][ T8661] macsec0: entered promiscuous mode [ 437.335501][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 437.359870][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.384692][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 437.546454][ T8651] syzkaller0: entered allmulticast mode [ 437.581505][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 437.757216][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 437.786375][ T8667] xt_HMARK: spi-set and port-set can't be combined [ 437.841297][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 437.899491][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.997'. [ 437.938998][ T8653] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.991: path /205/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 438.004433][ T8650] syzkaller0: left allmulticast mode [ 438.010351][ T8653] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.991: lblock 23 mapped to illegal pblock 18 (length 1) [ 438.439758][ T5781] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 438.555869][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.591283][ T8686] Invalid ELF header magic: != ELF [ 438.626986][ T8686] loop4: detected capacity change from 0 to 1024 [ 438.714676][ T8686] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 438.744572][ T8686] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 438.754208][ T8686] EXT4-fs (loop4): orphan cleanup on readonly fs [ 439.007299][ T8686] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 439.206585][ T8686] EXT4-fs (loop4): Remounting filesystem read-only [ 439.248967][ T8686] __quota_error: 1 callbacks suppressed [ 439.249046][ T8686] Quota error (device loop4): write_blk: dquota write failed [ 439.263693][ T8686] Quota error (device loop4): write_blk: dquota write failed [ 439.271690][ T8686] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 439.282709][ T8686] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 439.294302][ T8686] EXT4-fs (loop4): 1 orphan inode deleted [ 439.443435][ T8686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 439.983447][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.099788][ T8708] loop0: detected capacity change from 0 to 512 [ 440.121402][ T8708] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.377645][ T8704] xt_HMARK: spi-set and port-set can't be combined [ 440.436615][ T8704] macsec0: left promiscuous mode [ 440.453830][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 440.612915][ T8708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.657382][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 440.667214][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'. [ 440.676577][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1013'. [ 440.894480][ T8723] pim6reg9: entered allmulticast mode [ 440.934605][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 441.036499][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 441.119306][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 441.245087][ T8708] syzkaller0: entered allmulticast mode [ 441.272509][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 441.380436][ T8732] macsec0: entered promiscuous mode [ 441.406703][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 441.466083][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 441.512863][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 17: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 441.633781][ T8721] EXT4-fs error (device loop0): ext4_map_blocks:671: inode #2: block 18: comm syz.0.1014: lblock 23 mapped to illegal pblock 18 (length 1) [ 441.692374][ T8721] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 19: comm syz.0.1014: path /208/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 441.781301][ T8706] syzkaller0: left allmulticast mode [ 441.788949][ T8736] Invalid ELF header magic: != ELF [ 441.982830][ T8736] loop2: detected capacity change from 0 to 1024 [ 442.068672][ T5781] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 442.144855][ T8736] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 442.200468][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.229427][ T8736] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 442.253523][ T8736] EXT4-fs (loop2): orphan cleanup on readonly fs [ 442.283996][ T8736] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 442.312511][ T8736] EXT4-fs (loop2): Remounting filesystem read-only [ 442.335702][ T8736] Quota error (device loop2): write_blk: dquota write failed [ 442.343764][ T8736] Quota error (device loop2): write_blk: dquota write failed [ 442.351726][ T8736] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 442.362148][ T8736] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 442.371262][ T8736] EXT4-fs (loop2): 1 orphan inode deleted [ 442.444213][ T8736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 442.509278][ T8747] smc: net device bond0 applied user defined pnetid SYZ0 [ 442.610495][ T8745] loop4: detected capacity change from 0 to 512 [ 442.890601][ T8745] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1026: casefold flag without casefold feature [ 442.937699][ T8745] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1026: couldn't read orphan inode 15 (err -117) [ 442.953568][ T8745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.099900][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.370680][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.870464][ T8774] loop4: detected capacity change from 0 to 512 [ 443.911283][ T8774] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 443.966170][ T8774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.061542][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 444.155081][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 444.178253][ T8774] syzkaller0: entered allmulticast mode [ 444.238565][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 444.313051][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 444.395870][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 444.475063][ T8791] Invalid ELF header magic: != ELF [ 444.518080][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 444.583568][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 444.630834][ T8791] loop1: detected capacity change from 0 to 1024 [ 444.632593][ T8784] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 18: comm syz.4.1035: lblock 23 mapped to illegal pblock 18 (length 1) [ 444.695135][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 19: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 444.726308][ T8791] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 444.753662][ T8791] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 444.779949][ T8791] EXT4-fs (loop1): orphan cleanup on readonly fs [ 444.791393][ T8784] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 20: comm syz.4.1035: path /204/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 444.837717][ T8791] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 444.876573][ T8772] syzkaller0: left allmulticast mode [ 444.886163][ T8791] EXT4-fs (loop1): Remounting filesystem read-only [ 444.895191][ T8791] Quota error (device loop1): write_blk: dquota write failed [ 444.904786][ T8791] Quota error (device loop1): write_blk: dquota write failed [ 444.912891][ T8791] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 444.923161][ T8791] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 444.932354][ T8791] EXT4-fs (loop1): 1 orphan inode deleted [ 445.012891][ T8791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 445.184559][ T5784] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 445.275495][ T8799] loop3: detected capacity change from 0 to 512 [ 445.284380][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.337545][ T8799] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1045: casefold flag without casefold feature [ 445.353218][ T8799] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1045: couldn't read orphan inode 15 (err -117) [ 445.372551][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.556064][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.725932][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.214518][ T8812] loop3: detected capacity change from 0 to 2048 [ 446.265335][ T8812] EXT4-fs: Ignoring removed mblk_io_submit option [ 446.272216][ T8812] EXT4-fs: Ignoring removed i_version option [ 446.388899][ T8812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.708919][ T8824] capability: warning: `syz.2.1055' uses 32-bit capabilities (legacy support in use) [ 446.922914][ T8829] loop0: detected capacity change from 0 to 512 [ 446.960885][ T8829] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.143779][ T8829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.230228][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.337598][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 447.446731][ T8841] syzkaller0: entered allmulticast mode [ 447.496847][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 447.535735][ T8842] loop4: detected capacity change from 0 to 512 [ 447.542927][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 447.612302][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 14: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 447.652748][ T8842] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 447.703187][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 15: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 447.724911][ T8846] Invalid ELF header magic: != ELF [ 447.753537][ T8842] EXT4-fs (loop4): 1 orphan inode deleted [ 447.759551][ T8842] EXT4-fs (loop4): 1 truncate cleaned up [ 447.767228][ T8842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.838416][ T8828] syzkaller0: left allmulticast mode [ 447.863247][ T8839] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 16: comm syz.0.1058: path /217/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 447.937462][ T8846] loop1: detected capacity change from 0 to 1024 [ 447.996134][ T8846] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 448.038025][ T8846] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 448.072536][ T8846] EXT4-fs (loop1): orphan cleanup on readonly fs [ 448.155476][ T8846] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 448.186244][ T5781] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 448.252509][ T8846] EXT4-fs (loop1): Remounting filesystem read-only [ 448.260244][ T8846] Quota error (device loop1): write_blk: dquota write failed [ 448.268389][ T8846] Quota error (device loop1): write_blk: dquota write failed [ 448.276490][ T8846] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 448.286858][ T8846] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 448.296090][ T8846] EXT4-fs (loop1): 1 orphan inode deleted [ 448.334290][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.362329][ T8846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 448.388117][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.016308][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.163996][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 449.712796][ T8880] loop4: detected capacity change from 0 to 512 [ 449.762305][ T8880] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 449.885122][ T8885] program syz.0.1079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.899606][ T8880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.009334][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 450.233015][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 450.482148][ T8902] Invalid ELF header magic: != ELF [ 450.517948][ T8902] loop0: detected capacity change from 0 to 1024 [ 450.533284][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 13: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 450.557595][ T8880] syzkaller0: entered allmulticast mode [ 450.589251][ T8902] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 450.604048][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 14: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 450.694808][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 15: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 450.788941][ T8902] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 450.822548][ T8902] EXT4-fs (loop0): orphan cleanup on readonly fs [ 450.833942][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 450.910121][ T8893] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 17: comm syz.4.1076: path /210/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 450.932941][ T8902] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 450.939695][ T8878] syzkaller0: left allmulticast mode [ 450.949041][ T8893] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 18: comm syz.4.1076: lblock 23 mapped to illegal pblock 18 (length 1) [ 451.006282][ T8902] EXT4-fs (loop0): Remounting filesystem read-only [ 451.043681][ T8902] Quota error (device loop0): write_blk: dquota write failed [ 451.051626][ T8902] Quota error (device loop0): write_blk: dquota write failed [ 451.059943][ T8902] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 451.071287][ T8902] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 451.080700][ T8902] EXT4-fs (loop0): 1 orphan inode deleted [ 451.194239][ T8902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 451.288649][ T5784] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 451.355769][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.674936][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 451.900445][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.173246][ T8923] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 452.181259][ T8923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1094'. [ 452.413688][ T8926] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 453.078968][ T8937] loop0: detected capacity change from 0 to 512 [ 453.263779][ T8937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.338224][ T8939] loop1: detected capacity change from 0 to 512 [ 453.363361][ T8937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.364665][ T8935] loop2: detected capacity change from 0 to 512 [ 453.376672][ T8937] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.412328][ T8939] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 453.501004][ T8935] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1098: casefold flag without casefold feature [ 453.552123][ T8935] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1098: couldn't read orphan inode 15 (err -117) [ 453.587010][ T8937] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 453.660557][ T8937] Cannot find del_set index 0 as target [ 453.689749][ T8937] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 453.702564][ T8937] EXT4-fs (loop0): This should not happen!! Data will be lost [ 453.702564][ T8937] [ 453.712695][ T8937] EXT4-fs (loop0): Total free blocks count 0 [ 453.718919][ T8937] EXT4-fs (loop0): Free/Dirty block details [ 453.725246][ T8937] EXT4-fs (loop0): free_blocks=39627 [ 453.730778][ T8937] EXT4-fs (loop0): dirty_blocks=1 [ 453.736156][ T8937] EXT4-fs (loop0): Block reservation details [ 453.742620][ T8937] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 453.755928][ T8935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.787028][ T8952] Invalid ELF header magic: != ELF [ 453.895044][ T8939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.909353][ T8952] loop4: detected capacity change from 0 to 1024 [ 454.018604][ T8952] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 454.025124][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 454.094331][ T8952] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 454.115686][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.130782][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 454.177708][ T8952] EXT4-fs (loop4): orphan cleanup on readonly fs [ 454.235089][ T8952] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 454.265316][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 454.282409][ T8952] EXT4-fs (loop4): Remounting filesystem read-only [ 454.324624][ T8957] syzkaller0: entered allmulticast mode [ 454.379046][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 454.379653][ T8952] Quota error (device loop4): write_blk: dquota write failed [ 454.408433][ T8952] Quota error (device loop4): write_blk: dquota write failed [ 454.416502][ T8952] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 454.426857][ T8952] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 454.436125][ T8952] EXT4-fs (loop4): 1 orphan inode deleted [ 454.463947][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 454.487318][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 454.515058][ T8952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 454.541562][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1104'. [ 454.552712][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.633515][ T8956] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 17: comm syz.1.1100: path /214/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 454.654442][ T8938] syzkaller0: left allmulticast mode [ 455.018927][ T5792] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 455.046264][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.105284][ T8967] xt_HMARK: spi-set and port-set can't be combined [ 455.232544][ T8972] netlink: 'syz.1.1107': attribute type 10 has an invalid length. [ 455.240741][ T8972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1107'. [ 455.248105][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.376117][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 455.730278][ T8979] syz.0.1109[8979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.730790][ T8979] syz.0.1109[8979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.924780][ T8979] syz.0.1109[8979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.047665][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 457.272987][ T9002] loop4: detected capacity change from 0 to 512 [ 457.285083][ T8999] loop0: detected capacity change from 0 to 512 [ 457.322290][ T9001] Invalid ELF header magic: != ELF [ 457.330010][ T8999] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 457.379399][ T9002] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1115: casefold flag without casefold feature [ 457.421558][ T9002] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1115: couldn't read orphan inode 15 (err -117) [ 457.462704][ T9002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.467946][ T9001] loop1: detected capacity change from 0 to 1024 [ 457.658896][ T8999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.753165][ T9001] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.930645][ T9009] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 3: comm syz.0.1117: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 458.056708][ T9001] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 458.186274][ T9013] syzkaller0: entered allmulticast mode [ 458.277104][ T9001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 458.371454][ T9009] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 12: comm syz.0.1117: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 458.397203][ T9001] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 458.454301][ T9009] EXT4-fs error (device loop0): ext4_readdir:261: inode #2: block 13: comm syz.0.1117: path /230/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 458.464001][ T9001] EXT4-fs (loop1): Remounting filesystem read-only [ 458.487132][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.511104][ T8998] syzkaller0: left allmulticast mode [ 458.531260][ T9001] Quota error (device loop1): write_blk: dquota write failed [ 458.539352][ T9001] Quota error (device loop1): write_blk: dquota write failed [ 458.547487][ T9001] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 458.557852][ T9001] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 458.567076][ T9001] EXT4-fs (loop1): 1 orphan inode deleted [ 458.583783][ T9001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 458.714135][ T9020] xt_HMARK: spi-set and port-set can't be combined [ 458.750491][ T9020] 0ªX¹¦À: left allmulticast mode [ 458.761664][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 458.919518][ T5781] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 458.978686][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.537181][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.845187][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 460.308620][ T9048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 460.318029][ T9048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 460.327426][ T9048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 460.336785][ T9048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 460.475287][ T9051] xt_HMARK: spi-set and port-set can't be combined [ 460.573049][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1136'. [ 460.775889][ T9059] Invalid ELF header magic: != ELF [ 460.890325][ T9059] loop3: detected capacity change from 0 to 1024 [ 461.059195][ T9061] tap0: tun_chr_ioctl cmd 1074025677 [ 461.060301][ T9059] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 461.066855][ T9061] tap0: linktype set to 769 [ 461.118532][ T9059] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 461.135449][ T9059] EXT4-fs (loop3): orphan cleanup on readonly fs [ 461.413887][ T9059] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 461.443906][ T9059] EXT4-fs (loop3): Remounting filesystem read-only [ 461.451620][ T9059] Quota error (device loop3): write_blk: dquota write failed [ 461.460028][ T9059] Quota error (device loop3): write_blk: dquota write failed [ 461.468021][ T9059] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 461.478388][ T9059] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 461.487663][ T9059] EXT4-fs (loop3): 1 orphan inode deleted [ 461.970404][ T9059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 462.367613][ T9079] loop1: detected capacity change from 0 to 512 [ 462.509757][ T9079] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1145: casefold flag without casefold feature [ 462.575503][ T9079] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1145: couldn't read orphan inode 15 (err -117) [ 462.654656][ T9079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.743974][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.848564][ T9088] xt_HMARK: spi-set and port-set can't be combined [ 462.868913][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 463.386063][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.961764][ T9109] loop4: detected capacity change from 0 to 512 [ 464.121759][ T9109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.135239][ T9109] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.218294][ T9109] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1156: corrupted inode contents [ 464.350233][ T9109] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1156: mark_inode_dirty error [ 464.391025][ T9109] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1156: corrupted inode contents [ 464.458408][ T9109] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1156: mark_inode_dirty error [ 464.574882][ T9122] Invalid ELF header magic: != ELF [ 464.736208][ T9123] loop3: detected capacity change from 0 to 1024 [ 464.843580][ T9123] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 464.853804][ T9123] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 464.943706][ T9122] loop1: detected capacity change from 0 to 1024 [ 465.014699][ T9122] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.129810][ T9125] xt_HMARK: spi-set and port-set can't be combined [ 465.258640][ T9123] EXT4-fs (loop3): invalid journal inode [ 465.265188][ T9123] EXT4-fs (loop3): can't get journal size [ 465.287703][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.301642][ T9122] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 465.318502][ T9122] EXT4-fs (loop1): orphan cleanup on readonly fs [ 465.331694][ T9122] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 465.344211][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 465.390478][ T9123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.407048][ T9123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.423850][ T9122] EXT4-fs (loop1): Remounting filesystem read-only [ 465.432791][ T9122] Quota error (device loop1): write_blk: dquota write failed [ 465.440664][ T9122] Quota error (device loop1): write_blk: dquota write failed [ 465.450286][ T9122] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 465.461702][ T9122] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 465.473443][ T9122] EXT4-fs (loop1): 1 orphan inode deleted [ 465.552908][ T9122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 466.193261][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.422014][ T9135] loop2: detected capacity change from 0 to 512 [ 466.563921][ T9135] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1164: casefold flag without casefold feature [ 466.598788][ T9135] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1164: couldn't read orphan inode 15 (err -117) [ 466.640469][ T9135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.056386][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.150023][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 467.159811][ T9148] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 467.169081][ T9148] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 468.287685][ T9158] xt_HMARK: spi-set and port-set can't be combined [ 468.381479][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 468.423372][ T9158] syz_tun: left promiscuous mode [ 468.425972][ T9158] macsec0: left promiscuous mode [ 468.477039][ T9158] ip6gre1: left allmulticast mode [ 469.161228][ T9167] Invalid ELF header magic: != ELF [ 469.382283][ T9167] loop1: detected capacity change from 0 to 1024 [ 469.411646][ T9167] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 469.460618][ T9167] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 469.461442][ T9167] EXT4-fs (loop1): orphan cleanup on readonly fs [ 469.479862][ T9167] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 469.506084][ T9167] EXT4-fs (loop1): Remounting filesystem read-only [ 469.507158][ T9167] Quota error (device loop1): write_blk: dquota write failed [ 469.507441][ T9167] Quota error (device loop1): write_blk: dquota write failed [ 469.507764][ T9167] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 469.507965][ T9167] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 469.508158][ T9167] EXT4-fs (loop1): 1 orphan inode deleted [ 469.526056][ T9167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 470.333759][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.406999][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.407258][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.605189][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 471.606906][ T9192] xt_HMARK: spi-set and port-set can't be combined [ 471.614914][ T9190] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 471.630217][ T9190] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 471.665136][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 472.173581][ T9201] Invalid ELF header magic: != ELF [ 472.319257][ T9201] loop3: detected capacity change from 0 to 1024 [ 472.406024][ T9201] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 472.489535][ T9201] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 472.574849][ T9201] EXT4-fs (loop3): orphan cleanup on readonly fs [ 472.593845][ T9207] tmpfs: Bad value for 'mpol' [ 472.659292][ T9201] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 472.709820][ T9201] EXT4-fs (loop3): Remounting filesystem read-only [ 472.761573][ T9201] Quota error (device loop3): write_blk: dquota write failed [ 472.766848][ T9211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1196'. [ 472.769695][ T9201] Quota error (device loop3): write_blk: dquota write failed [ 472.786698][ T9201] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 472.803151][ T9201] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 472.812443][ T9201] EXT4-fs (loop3): 1 orphan inode deleted [ 472.930449][ T9201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 472.944804][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 473.357262][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.431770][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 473.441662][ T9219] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 473.450891][ T9219] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 474.147421][ T29] audit: type=1326 audit(1735356181.767:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.170742][ T29] audit: type=1326 audit(1735356181.767:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.193710][ T29] audit: type=1326 audit(1735356181.767:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.225417][ T29] audit: type=1326 audit(1735356181.767:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.248992][ T29] audit: type=1326 audit(1735356181.767:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.272072][ T29] audit: type=1326 audit(1735356181.767:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.3.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 474.785148][ T9248] Invalid ELF header magic: != ELF [ 474.873670][ T9249] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 474.883203][ T9249] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 474.927246][ T9248] loop2: detected capacity change from 0 to 1024 [ 474.976356][ T9248] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.023717][ T9248] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 475.049438][ T9248] EXT4-fs (loop2): orphan cleanup on readonly fs [ 475.066838][ T9248] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 475.122714][ T9248] EXT4-fs (loop2): Remounting filesystem read-only [ 475.131314][ T9248] EXT4-fs (loop2): 1 orphan inode deleted [ 475.312689][ T9248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 475.428693][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 475.438569][ T9260] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 475.447740][ T9260] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 475.608535][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.862082][ T9264] loop1: detected capacity change from 0 to 256 [ 475.992945][ T9264] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 476.128308][ T9267] loop2: detected capacity change from 0 to 164 [ 476.204598][ T9267] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 476.253218][ T9267] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 476.295445][ T9267] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 477.159985][ T9287] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 477.168788][ T9287] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 477.179402][ T9287] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 477.189632][ T9287] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 477.426901][ T9293] Invalid ELF header magic: != ELF [ 477.715616][ T9293] loop4: detected capacity change from 0 to 1024 [ 477.787811][ T9293] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 477.799316][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 477.809222][ T9297] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 477.818454][ T9297] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 477.849572][ T9293] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 477.859385][ T9293] EXT4-fs (loop4): orphan cleanup on readonly fs [ 477.940532][ T9293] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 477.957727][ T9293] EXT4-fs (loop4): Remounting filesystem read-only [ 477.967469][ T9293] __quota_error: 160 callbacks suppressed [ 477.967547][ T9293] Quota error (device loop4): write_blk: dquota write failed [ 477.981614][ T9293] Quota error (device loop4): write_blk: dquota write failed [ 477.989618][ T9293] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 477.999934][ T9293] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 478.009162][ T9293] EXT4-fs (loop4): 1 orphan inode deleted [ 478.104255][ T9293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 478.153765][ T9303] xt_HMARK: spi-set and port-set can't be combined [ 478.192754][ T9303] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 478.201700][ T9303] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 478.210678][ T9303] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 478.219680][ T9303] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 478.321537][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 478.409360][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.222506][ T29] audit: type=1326 audit(1735356187.007:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.3.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 479.245503][ T29] audit: type=1326 audit(1735356187.007:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9324 comm="syz.3.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 479.551517][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 479.561373][ T9335] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 479.570689][ T9335] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 479.673102][ T29] audit: type=1326 audit(1735356187.457:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 479.696444][ T29] audit: type=1326 audit(1735356187.467:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 479.870865][ T29] audit: type=1326 audit(1735356187.587:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 479.879047][ T9340] loop2: detected capacity change from 0 to 512 [ 479.893914][ T29] audit: type=1326 audit(1735356187.587:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9332 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 480.011283][ T9340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 480.163962][ T9340] EXT4-fs (loop2): 1 truncate cleaned up [ 480.171430][ T9340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.312350][ T9344] xt_HMARK: spi-set and port-set can't be combined [ 480.363220][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 480.386953][ T9340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.932009][ T9355] loop3: detected capacity change from 0 to 8192 [ 481.560026][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 481.569888][ T9367] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 481.579163][ T9367] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 482.313560][ T9378] xt_HMARK: spi-set and port-set can't be combined [ 482.421020][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 483.521599][ T44] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 483.702098][ T44] usb 5-1: Invalid ep0 maxpacket: 32 [ 483.862745][ T44] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 483.978183][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1276'. [ 483.988218][ T9405] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 483.997508][ T9405] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 484.053465][ T44] usb 5-1: Invalid ep0 maxpacket: 32 [ 484.062421][ T44] usb usb5-port1: attempt power cycle [ 484.495087][ T9412] xt_HMARK: spi-set and port-set can't be combined [ 484.652484][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 484.692247][ T44] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 484.734143][ T44] usb 5-1: Invalid ep0 maxpacket: 32 [ 484.893933][ T44] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 484.955908][ T44] usb 5-1: Invalid ep0 maxpacket: 32 [ 484.976347][ T44] usb usb5-port1: unable to enumerate USB device [ 486.910484][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 486.910566][ T29] audit: type=1326 audit(1735356194.647:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 486.941689][ T29] audit: type=1326 audit(1735356194.647:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 486.965771][ T29] audit: type=1326 audit(1735356194.647:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 486.989319][ T29] audit: type=1326 audit(1735356194.647:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.012791][ T29] audit: type=1326 audit(1735356194.647:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.036310][ T29] audit: type=1326 audit(1735356194.657:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.059750][ T29] audit: type=1326 audit(1735356194.657:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.083756][ T29] audit: type=1326 audit(1735356194.657:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.107291][ T29] audit: type=1326 audit(1735356194.657:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.192706][ T29] audit: type=1326 audit(1735356194.927:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9440 comm="syz.4.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 487.534814][ T9445] xt_HMARK: spi-set and port-set can't be combined [ 487.684382][ T9445] macsec0: left promiscuous mode [ 487.748756][ T9445] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 487.749068][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 487.758306][ T9445] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 487.758763][ T9445] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 487.758965][ T9445] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 488.277513][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 489.764976][ T9488] xt_HMARK: spi-set and port-set can't be combined [ 489.785077][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'. [ 490.252483][ T9498] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 490.261704][ T9498] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 490.271000][ T9498] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 490.280290][ T9498] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 490.674629][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 491.052178][ T9513] ipip0: entered promiscuous mode [ 491.057664][ T9513] ipip0: entered allmulticast mode [ 491.459438][ T9521] xt_HMARK: spi-set and port-set can't be combined [ 491.596909][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 492.244838][ T9536] sg_write: data in/out 14238/8 bytes for SCSI command 0xd0-- guessing data in; [ 492.244838][ T9536] program syz.1.1329 not setting count and/or reply_len properly [ 492.860189][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 492.860269][ T29] audit: type=1326 audit(1735356200.647:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 492.889564][ T29] audit: type=1326 audit(1735356200.647:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 492.912568][ T29] audit: type=1326 audit(1735356200.667:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 492.935410][ T29] audit: type=1326 audit(1735356200.667:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 492.958260][ T29] audit: type=1326 audit(1735356200.667:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 492.981499][ T29] audit: type=1326 audit(1735356200.667:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 493.004384][ T29] audit: type=1326 audit(1735356200.757:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 493.027196][ T29] audit: type=1326 audit(1735356200.777:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 493.043728][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 493.049779][ T29] audit: type=1326 audit(1735356200.777:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 493.059249][ T9551] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 493.081301][ T29] audit: type=1326 audit(1735356200.797:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9548 comm="syz.1.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 493.087094][ T9537] loop2: detected capacity change from 0 to 8192 [ 493.090788][ T9551] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 493.848896][ T9562] loop1: detected capacity change from 0 to 512 [ 493.999299][ T9562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.138577][ T9562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.154741][ T9562] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.330631][ T9562] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 494.423447][ T9562] Cannot find del_set index 0 as target [ 494.514239][ T9562] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 494.527186][ T9562] EXT4-fs (loop1): This should not happen!! Data will be lost [ 494.527186][ T9562] [ 494.537325][ T9562] EXT4-fs (loop1): Total free blocks count 0 [ 494.543877][ T9562] EXT4-fs (loop1): Free/Dirty block details [ 494.550004][ T9562] EXT4-fs (loop1): free_blocks=39627 [ 494.555690][ T9562] EXT4-fs (loop1): dirty_blocks=1 [ 494.560962][ T9562] EXT4-fs (loop1): Block reservation details [ 494.567487][ T9562] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 494.722175][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 494.900679][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 494.919975][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.924136][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 494.930530][ T44] usb 4-1: config 0 has no interfaces? [ 494.940194][ T9584] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 494.945460][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.954200][ T9584] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 494.963547][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.012282][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.039183][ T44] usb 4-1: config 0 descriptor?? [ 495.447552][ T9578] loop3: detected capacity change from 0 to 1024 [ 495.491597][ T9578] EXT4-fs: Ignoring removed nobh option [ 495.497973][ T9578] EXT4-fs: Ignoring removed nomblk_io_submit option [ 495.547831][ T9578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 495.647244][ T9578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.725012][ T9588] loop1: detected capacity change from 0 to 8192 [ 495.744113][ T9598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.753434][ T9598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.762738][ T9598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.772181][ T9598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 495.919397][ T9578] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 496.238789][ T44] usb 4-1: USB disconnect, device number 2 [ 496.912266][ T9617] loop4: detected capacity change from 0 to 256 [ 496.996018][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.115823][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'. [ 497.125675][ T9621] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 497.136034][ T9621] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (79) [ 498.133671][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 498.133751][ T29] audit: type=1326 audit(1735356205.927:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.168111][ T29] audit: type=1326 audit(1735356205.957:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.249703][ T29] audit: type=1326 audit(1735356205.997:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.272710][ T29] audit: type=1326 audit(1735356205.997:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.296067][ T29] audit: type=1326 audit(1735356205.997:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.311910][ T9633] loop1: detected capacity change from 0 to 8192 [ 498.318919][ T29] audit: type=1326 audit(1735356206.007:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.347895][ T29] audit: type=1326 audit(1735356206.007:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.370730][ T29] audit: type=1326 audit(1735356206.007:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.394162][ T29] audit: type=1326 audit(1735356206.007:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.417079][ T29] audit: type=1326 audit(1735356206.017:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9634 comm="syz.3.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 498.737112][ T44] kernel write not supported for file /input/event2 (pid: 44 comm: kworker/1:1) [ 499.521559][ T9661] siw: device registration error -23 [ 499.675458][ T9663] usb usb7: usbfs: process 9663 (syz.0.1383) did not claim interface 0 before use [ 500.678987][ T9678] loop1: detected capacity change from 0 to 512 [ 500.887298][ T9681] loop3: detected capacity change from 0 to 8192 [ 500.928213][ T9678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.941702][ T9678] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.144689][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 501.229778][ T9692] veth0_virt_wifi: entered promiscuous mode [ 501.277261][ T9692] veth0_virt_wifi: left promiscuous mode [ 501.446503][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.646425][ T9694] ipip0: entered promiscuous mode [ 501.651751][ T9694] ipip0: entered allmulticast mode [ 502.267966][ T9707] bridge0: port 3(vlan2) entered blocking state [ 502.275093][ T9707] bridge0: port 3(vlan2) entered disabled state [ 502.282340][ T9707] vlan2: entered allmulticast mode [ 502.351565][ T9707] vlan2: left allmulticast mode [ 504.110532][ T9735] tmpfs: Bad value for 'mpol' [ 504.186713][ T9739] ipip0: entered promiscuous mode [ 504.192516][ T9739] ipip0: entered allmulticast mode [ 504.807164][ T9753] netlink: 'syz.3.1417': attribute type 10 has an invalid length. [ 504.815924][ T9753] syz_tun: entered promiscuous mode [ 504.832421][ T9753] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 505.142510][ T9744] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 505.148709][ T9744] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 505.239975][ T9744] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 505.246467][ T9744] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 505.313172][ T9744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 505.319490][ T9744] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 505.353440][ T9744] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.359719][ T9744] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 505.458716][ T9744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 505.465430][ T9744] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 505.523306][ T44] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 505.568439][ T9766] syz.3.1422 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 505.979282][ T44] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.632901][ T9786] ipip0: entered promiscuous mode [ 506.638233][ T9786] ipip0: entered allmulticast mode [ 507.405132][ T9800] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 507.405242][ T9800] syz_tun: entered promiscuous mode [ 507.424927][ T9800] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 507.484442][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 507.484521][ T29] audit: type=1326 audit(1735356215.247:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.484750][ T29] audit: type=1326 audit(1735356215.247:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.726079][ T29] audit: type=1326 audit(1735356215.517:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.726328][ T29] audit: type=1326 audit(1735356215.517:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.728437][ T29] audit: type=1326 audit(1735356215.517:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.744407][ T29] audit: type=1326 audit(1735356215.527:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.750783][ T29] audit: type=1326 audit(1735356215.537:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.765373][ T29] audit: type=1326 audit(1735356215.547:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.768326][ T29] audit: type=1326 audit(1735356215.557:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 507.803669][ T29] audit: type=1326 audit(1735356215.597:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9796 comm="syz.4.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 508.187594][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.639348][ T9842] netlink: 'syz.1.1449': attribute type 10 has an invalid length. [ 509.648011][ T9842] syz_tun: entered promiscuous mode [ 511.682407][ T9877] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 511.703545][ T9873] loop4: detected capacity change from 0 to 1024 [ 511.822438][ T9873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.523497][ T9891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 512.878724][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 512.878805][ T29] audit: type=1326 audit(1735356220.647:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 512.908150][ T29] audit: type=1326 audit(1735356220.647:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 513.705832][ T9902] ipip0: entered promiscuous mode [ 513.711143][ T9902] ipip0: entered allmulticast mode [ 514.665546][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.770120][ T9930] loop1: detected capacity change from 0 to 1024 [ 516.067025][ T9930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.751067][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.431500][ T9952] loop2: detected capacity change from 0 to 512 [ 517.509804][ T9952] EXT4-fs: Ignoring removed oldalloc option [ 517.705126][ T9952] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.034301][ T9952] EXT4-fs (loop2): 1 truncate cleaned up [ 518.042252][ T9952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.134469][ T9952] loop2: detected capacity change from 512 to 64 [ 518.385569][ T9969] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 19: block 77:freeing already freed block (bit 76); block bitmap corrupt. [ 518.402515][ T9969] EXT4-fs (loop2): pa ffff888122b7a460: logic 0, phys. 65, len 64 [ 518.413126][ T9969] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 12 [ 519.236311][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.568160][T10020] xt_HMARK: spi-set and port-set can't be combined [ 520.686522][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1502'. [ 522.511077][T10067] xt_HMARK: spi-set and port-set can't be combined [ 522.600095][T10067] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 522.609914][T10067] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 522.619394][T10067] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 522.629210][T10067] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 522.658864][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 522.775294][T10067] ipip0: left promiscuous mode [ 522.780356][T10067] ipip0: left allmulticast mode [ 524.888825][T10113] xt_HMARK: spi-set and port-set can't be combined [ 525.000414][T10113] syz_tun: left promiscuous mode [ 525.038953][T10113] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 525.049364][T10113] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 525.059045][T10113] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 525.068470][T10113] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 525.128354][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 525.173106][T10113] ipip0: left promiscuous mode [ 525.178375][T10113] ipip0: left allmulticast mode [ 525.451450][T10122] loop4: detected capacity change from 0 to 512 [ 525.502500][T10122] EXT4-fs: Ignoring removed oldalloc option [ 525.577202][T10122] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 526.018502][T10132] loop2: detected capacity change from 0 to 512 [ 526.027780][T10132] EXT4-fs: Ignoring removed oldalloc option [ 526.102533][T10132] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 526.540439][T10122] EXT4-fs (loop4): 1 truncate cleaned up [ 526.548520][T10122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.579311][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 526.652182][T10132] EXT4-fs (loop2): 1 truncate cleaned up [ 526.659658][T10132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.763996][T10132] loop2: detected capacity change from 512 to 64 [ 526.839884][T10132] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 19: block 77:freeing already freed block (bit 76); block bitmap corrupt. [ 526.855556][T10132] EXT4-fs (loop2): pa ffff8881229524d0: logic 0, phys. 65, len 64 [ 526.863844][T10132] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 12 [ 526.951163][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.989785][T10148] loop3: detected capacity change from 0 to 512 [ 527.280091][T10148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.293376][T10148] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.311209][T10148] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1547: corrupted inode contents [ 527.324757][T10148] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1547: mark_inode_dirty error [ 527.338731][T10148] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1547: corrupted inode contents [ 527.352081][T10148] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1547: mark_inode_dirty error [ 527.372993][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.869609][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.212780][ T29] audit: type=1326 audit(1735356235.997:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 528.236057][ T29] audit: type=1326 audit(1735356236.027:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 528.258953][ T29] audit: type=1326 audit(1735356236.027:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0af0985d63 code=0x7ffc0000 [ 528.282062][ T29] audit: type=1326 audit(1735356236.027:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0af09847df code=0x7ffc0000 [ 528.417675][T10170] loop3: detected capacity change from 0 to 1024 [ 528.441367][ T29] audit: type=1326 audit(1735356236.197:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0af0985db7 code=0x7ffc0000 [ 528.464854][ T29] audit: type=1326 audit(1735356236.207:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0af0984690 code=0x7ffc0000 [ 528.487728][ T29] audit: type=1326 audit(1735356236.207:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0af098592b code=0x7ffc0000 [ 528.510532][ T29] audit: type=1326 audit(1735356236.217:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0af098498a code=0x7ffc0000 [ 528.533234][ T29] audit: type=1326 audit(1735356236.217:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0af098498a code=0x7ffc0000 [ 528.556069][ T29] audit: type=1326 audit(1735356236.227:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.3.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0af0984597 code=0x7ffc0000 [ 528.611961][T10175] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.682995][T10170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.228605][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.497874][T10207] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1570'. [ 530.507975][T10207] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1570'. [ 530.577852][T10210] loop1: detected capacity change from 0 to 512 [ 530.727103][T10210] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 530.872786][T10210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.993962][T10210] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 3: comm syz.1.1569: path /305/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 531.128392][T10210] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 12: comm syz.1.1569: path /305/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 531.286519][T10220] loop3: detected capacity change from 0 to 1024 [ 531.309740][T10210] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 13: comm syz.1.1569: path /305/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 531.393979][T10220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.573371][T10210] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 14: comm syz.1.1569: path /305/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 531.661573][T10210] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 15: comm syz.1.1569: path /305/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 531.809484][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.846998][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.427343][ T5792] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 532.580165][T10237] syz.3.1580[10237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.580606][T10237] syz.3.1580[10237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.616647][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.738658][T10237] syz.3.1580[10237] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.508465][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 534.508555][ T29] audit: type=1326 audit(1735356242.287:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 534.732994][ T29] audit: type=1326 audit(1735356242.367:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 534.756285][ T29] audit: type=1326 audit(1735356242.367:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f605b785d29 code=0x7ffc0000 [ 534.782238][ T29] audit: type=1326 audit(1735356242.367:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f605b785d63 code=0x7ffc0000 [ 534.805066][ T29] audit: type=1326 audit(1735356242.367:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f605b7847df code=0x7ffc0000 [ 534.852001][T10253] loop2: detected capacity change from 0 to 1024 [ 534.898631][T10262] loop3: detected capacity change from 0 to 512 [ 534.956515][T10253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.974955][T10262] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 534.990697][ T29] audit: type=1326 audit(1735356242.637:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f605b785db7 code=0x7ffc0000 [ 535.014496][ T29] audit: type=1326 audit(1735356242.637:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f605b784690 code=0x7ffc0000 [ 535.037409][ T29] audit: type=1326 audit(1735356242.637:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f605b78592b code=0x7ffc0000 [ 535.060302][ T29] audit: type=1326 audit(1735356242.657:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f605b78498a code=0x7ffc0000 [ 535.083188][ T29] audit: type=1326 audit(1735356242.657:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f605b78498a code=0x7ffc0000 [ 535.228331][T10262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.351265][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 3: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 535.590422][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 12: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 535.626163][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 13: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 535.825906][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 14: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 535.864572][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.035515][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 15: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 536.133002][T10262] EXT4-fs error (device loop3): ext4_readdir:261: inode #2: block 16: comm syz.3.1589: path /321/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 536.622243][ T5782] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 536.679847][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.652609][T10301] loop4: detected capacity change from 0 to 1024 [ 537.760061][T10301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.334137][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.993381][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 539.993459][ T29] audit: type=1326 audit(1735356247.757:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.022859][ T29] audit: type=1326 audit(1735356247.767:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.042895][T10334] loop4: detected capacity change from 0 to 512 [ 540.045884][ T29] audit: type=1326 audit(1735356247.767:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.074559][ T29] audit: type=1326 audit(1735356247.777:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.097326][ T29] audit: type=1326 audit(1735356247.777:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.120585][ T29] audit: type=1326 audit(1735356247.777:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.143630][ T29] audit: type=1326 audit(1735356247.777:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.166504][ T29] audit: type=1326 audit(1735356247.777:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.189359][ T29] audit: type=1326 audit(1735356247.787:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.212331][ T29] audit: type=1326 audit(1735356247.977:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10335 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 540.269464][T10334] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 540.280045][T10334] EXT4-fs (loop4): orphan cleanup on readonly fs [ 540.563570][T10334] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1617: Failed to acquire dquot type 1 [ 540.606124][T10334] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1617: bg 0: block 40: padding at end of block bitmap is not set [ 540.700628][T10334] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 540.762849][T10334] EXT4-fs (loop4): 1 truncate cleaned up [ 540.770828][T10334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.827379][T10341] loop3: detected capacity change from 0 to 1024 [ 541.042103][T10341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.179882][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.517827][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.743254][T10373] loop1: detected capacity change from 0 to 1024 [ 543.763717][T10373] EXT4-fs: Ignoring removed bh option [ 543.781404][T10373] EXT4-fs: Mount option(s) incompatible with ext2 [ 545.599512][T10395] loop3: detected capacity change from 0 to 256 [ 545.844574][T10395] FAT-fs (loop3): Directory bread(block 64) failed [ 545.852260][T10395] FAT-fs (loop3): Directory bread(block 65) failed [ 545.859192][T10395] FAT-fs (loop3): Directory bread(block 66) failed [ 545.866153][T10395] FAT-fs (loop3): Directory bread(block 67) failed [ 545.873304][T10395] FAT-fs (loop3): Directory bread(block 68) failed [ 545.880093][T10395] FAT-fs (loop3): Directory bread(block 69) failed [ 545.887240][T10395] FAT-fs (loop3): Directory bread(block 70) failed [ 545.894186][T10395] FAT-fs (loop3): Directory bread(block 71) failed [ 545.901093][T10395] FAT-fs (loop3): Directory bread(block 72) failed [ 545.908126][T10395] FAT-fs (loop3): Directory bread(block 73) failed [ 546.057982][T10395] syz.3.1640: attempt to access beyond end of device [ 546.057982][T10395] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 546.072544][T10395] syz.3.1640: attempt to access beyond end of device [ 546.072544][T10395] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 546.092043][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 546.092136][ T29] audit: type=1800 audit(1735356253.887:760): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1640" name="file1" dev="loop3" ino=1048609 res=0 errno=0 [ 546.932164][ T29] audit: type=1326 audit(1735356254.597:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 546.955165][ T29] audit: type=1326 audit(1735356254.607:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 546.978161][ T29] audit: type=1326 audit(1735356254.607:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.001609][ T29] audit: type=1326 audit(1735356254.607:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.024641][ T29] audit: type=1326 audit(1735356254.607:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.047622][ T29] audit: type=1326 audit(1735356254.617:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.070509][ T29] audit: type=1326 audit(1735356254.617:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.093653][ T29] audit: type=1326 audit(1735356254.627:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.116678][ T29] audit: type=1326 audit(1735356254.627:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10403 comm="syz.3.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af0985d29 code=0x7ffc0000 [ 547.549523][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1638'. [ 548.203500][T10414] loop4: detected capacity change from 0 to 1024 [ 548.335345][T10414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.678828][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.070042][T10431] loop4: detected capacity change from 0 to 256 [ 549.387794][T10431] FAT-fs (loop4): Directory bread(block 64) failed [ 549.394961][T10431] FAT-fs (loop4): Directory bread(block 65) failed [ 549.402075][T10431] FAT-fs (loop4): Directory bread(block 66) failed [ 549.408871][T10431] FAT-fs (loop4): Directory bread(block 67) failed [ 549.416001][T10431] FAT-fs (loop4): Directory bread(block 68) failed [ 549.422892][T10431] FAT-fs (loop4): Directory bread(block 69) failed [ 549.429816][T10431] FAT-fs (loop4): Directory bread(block 70) failed [ 549.436702][T10431] FAT-fs (loop4): Directory bread(block 71) failed [ 549.443855][T10431] FAT-fs (loop4): Directory bread(block 72) failed [ 549.450645][T10431] FAT-fs (loop4): Directory bread(block 73) failed [ 549.595962][T10431] syz.4.1653: attempt to access beyond end of device [ 549.595962][T10431] loop4: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 549.610450][T10431] syz.4.1653: attempt to access beyond end of device [ 549.610450][T10431] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 549.718841][T10431] syz.4.1653: attempt to access beyond end of device [ 549.718841][T10431] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 551.351691][T10446] xt_HMARK: spi-set and port-set can't be combined [ 551.475224][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 552.082817][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 552.082899][ T29] audit: type=1326 audit(1735356259.867:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 552.112456][ T29] audit: type=1326 audit(1735356259.867:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 552.135355][ T29] audit: type=1326 audit(1735356259.877:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4b5a585d29 code=0x7ffc0000 [ 552.158267][ T29] audit: type=1326 audit(1735356259.877:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b5a585d63 code=0x7ffc0000 [ 552.181015][ T29] audit: type=1326 audit(1735356259.907:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4b5a5847df code=0x7ffc0000 [ 552.203802][ T29] audit: type=1326 audit(1735356259.967:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4b5a585db7 code=0x7ffc0000 [ 552.215903][T10454] loop4: detected capacity change from 0 to 1024 [ 552.226444][ T29] audit: type=1326 audit(1735356260.007:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b5a584690 code=0x7ffc0000 [ 552.226666][ T29] audit: type=1326 audit(1735356260.007:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5a58592b code=0x7ffc0000 [ 552.450606][ T29] audit: type=1326 audit(1735356260.147:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b5a58498a code=0x7ffc0000 [ 552.473843][ T29] audit: type=1326 audit(1735356260.147:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.4.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b5a58498a code=0x7ffc0000 [ 552.499221][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.725062][ T5784] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.307989][T10467] IPVS: Error joining to the multicast group [ 553.481935][T10471] loop3: detected capacity change from 0 to 256 [ 553.783752][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 553.970074][T10471] FAT-fs (loop3): Directory bread(block 64) failed [ 553.977284][T10471] FAT-fs (loop3): Directory bread(block 65) failed [ 553.984389][T10471] FAT-fs (loop3): Directory bread(block 66) failed [ 553.991179][T10471] FAT-fs (loop3): Directory bread(block 67) failed [ 553.998201][T10471] FAT-fs (loop3): Directory bread(block 68) failed [ 554.005067][T10471] FAT-fs (loop3): Directory bread(block 69) failed [ 554.012101][T10471] FAT-fs (loop3): Directory bread(block 70) failed [ 554.018886][T10471] FAT-fs (loop3): Directory bread(block 71) failed [ 554.026588][T10471] FAT-fs (loop3): Directory bread(block 72) failed [ 554.033487][T10471] FAT-fs (loop3): Directory bread(block 73) failed [ 554.304387][T10471] syz.3.1669: attempt to access beyond end of device [ 554.304387][T10471] loop3: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 554.318719][T10471] syz.3.1669: attempt to access beyond end of device [ 554.318719][T10471] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 554.701363][T10482] xt_HMARK: spi-set and port-set can't be combined [ 554.810512][T10482] syz_tun: left promiscuous mode [ 554.871176][T10482] ipip0: left promiscuous mode [ 554.876493][T10482] ipip0: left allmulticast mode [ 554.949661][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 555.587823][T10494] loop1: detected capacity change from 0 to 1024 [ 555.816542][T10494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.943939][T10508] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 556.251658][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.290147][T10529] xt_HMARK: spi-set and port-set can't be combined [ 557.426442][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 558.602747][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 558.602827][ T29] audit: type=1326 audit(1735356266.387:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 558.632391][ T29] audit: type=1326 audit(1735356266.397:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 558.655191][ T29] audit: type=1326 audit(1735356266.397:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 558.678148][ T29] audit: type=1326 audit(1735356266.397:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 558.701154][ T29] audit: type=1326 audit(1735356266.397:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10537 comm="syz.1.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd76b85d29 code=0x7ffc0000 [ 559.057589][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1699'. [ 559.772645][T10557] 9pnet_fd: Insufficient options for proto=fd [ 559.802099][T10560] netlink: 'syz.4.1703': attribute type 10 has an invalid length. [ 559.810197][T10560] syz_tun: entered promiscuous mode [ 559.826382][T10560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 559.922566][T10563] loop2: detected capacity change from 0 to 512 [ 559.966436][T10563] EXT4-fs: Ignoring removed mblk_io_submit option [ 559.973730][T10563] EXT4-fs: Ignoring removed mblk_io_submit option [ 560.147745][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1707'. [ 560.306030][T10563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c119, mo2=0002] [ 560.346669][T10563] System zones: 1-12 [ 560.457844][T10563] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1705: corrupted in-inode xattr: e_value size too large [ 560.552434][T10563] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1705: couldn't read orphan inode 15 (err -117) [ 560.640854][T10563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.052702][T10574] serio: Serial port ptm0 [ 561.172725][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.915372][T10591] 9pnet_fd: Insufficient options for proto=fd [ 562.169824][T10585] loop2: detected capacity change from 0 to 8192 [ 562.628335][T10594] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 562.638963][T10594] syz_tun: entered promiscuous mode [ 562.725086][T10597] netlink: 'syz.3.1720': attribute type 4 has an invalid length. [ 564.312337][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 564.322110][T10622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.372305][T10622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.432179][T10622] bond0: (slave batadv0): Releasing backup interface [ 566.100881][T10642] smc: net device bond0 erased user defined pnetid SYZ0 [ 566.435914][T10649] macsec0: entered promiscuous mode [ 566.595675][T10648] loop3: detected capacity change from 0 to 2048 [ 566.620686][T10654] loop1: detected capacity change from 0 to 512 [ 566.707441][T10654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.722924][T10654] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.772754][T10648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.016467][ T29] audit: type=1800 audit(1735356274.797:984): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1739" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 567.168494][T10646] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 567.195104][T10646] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 567.208834][T10646] EXT4-fs (loop3): This should not happen!! Data will be lost [ 567.208834][T10646] [ 567.220948][T10646] EXT4-fs (loop3): Total free blocks count 0 [ 567.227368][T10646] EXT4-fs (loop3): Free/Dirty block details [ 567.233623][T10646] EXT4-fs (loop3): free_blocks=66060288 [ 567.239425][T10646] EXT4-fs (loop3): dirty_blocks=192 [ 567.247070][T10646] EXT4-fs (loop3): Block reservation details [ 567.253768][T10646] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 567.604441][T10673] loop2: detected capacity change from 0 to 512 [ 567.613228][T10673] EXT4-fs: Ignoring removed oldalloc option [ 567.631446][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.647366][T10673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 567.729693][T10673] EXT4-fs (loop2): 1 truncate cleaned up [ 567.737598][T10673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.017698][ T5793] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 568.087452][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.105206][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.230206][T10680] ===================================================== [ 568.238766][T10680] BUG: KMSAN: uninit-value in io_recv+0x930/0x1f90 [ 568.247934][T10680] io_recv+0x930/0x1f90 [ 568.253367][T10680] io_issue_sqe+0x420/0x2130 [ 568.258186][T10680] io_req_task_submit+0xfa/0x1d0 [ 568.263441][T10680] io_handle_tw_list+0x55f/0x5c0 [ 568.268581][T10680] tctx_task_work_run+0x109/0x3e0 [ 568.273997][T10680] tctx_task_work+0x6d/0xc0 [ 568.278692][T10680] task_work_run+0x268/0x310 [ 568.284021][T10680] io_run_task_work+0x43a/0x4a0 [ 568.289081][T10680] __se_sys_io_uring_enter+0x204f/0x4ce0 [ 568.295025][T10680] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 568.300799][T10680] x64_sys_call+0xce5/0x3c30 [ 568.305731][T10680] do_syscall_64+0xcd/0x1e0 [ 568.310413][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.316736][T10680] [ 568.319168][T10680] Uninit was created at: [ 568.323798][T10680] __kmalloc_noprof+0x923/0x1230 [ 568.328989][T10680] io_alloc_async_data+0xc0/0x220 [ 568.334445][T10680] io_recvmsg_prep+0xbe8/0x1a20 [ 568.339514][T10680] io_submit_sqes+0x1082/0x2f80 [ 568.344709][T10680] __se_sys_io_uring_enter+0x409/0x4ce0 [ 568.350493][T10680] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 568.356353][T10680] x64_sys_call+0xce5/0x3c30 [ 568.361185][T10680] do_syscall_64+0xcd/0x1e0 [ 568.365966][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.372455][T10680] [ 568.374915][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.3.1747 Not tainted 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 568.386021][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 568.396363][T10680] ===================================================== [ 568.403769][T10680] Disabling lock debugging due to kernel taint [ 568.410061][T10680] Kernel panic - not syncing: kmsan.panic set ... [ 568.416637][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.3.1747 Tainted: G B 6.13.0-rc4-syzkaller-00069-g8379578b11d5 #0 [ 568.429105][T10680] Tainted: [B]=BAD_PAGE [ 568.433364][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 568.443571][T10680] Call Trace: [ 568.446963][T10680] [ 568.449997][T10680] dump_stack_lvl+0x216/0x2d0 [ 568.454895][T10680] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 568.460892][T10680] dump_stack+0x1e/0x24 [ 568.465242][T10680] panic+0x4e2/0xcf0 [ 568.469320][T10680] ? kmsan_get_metadata+0x131/0x1c0 [ 568.474705][T10680] kmsan_report+0x2c7/0x2d0 [ 568.479372][T10680] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 568.485361][T10680] ? __msan_warning+0x95/0x120 [ 568.490340][T10680] ? io_recv+0x930/0x1f90 [ 568.494859][T10680] ? io_issue_sqe+0x420/0x2130 [ 568.499815][T10680] ? io_req_task_submit+0xfa/0x1d0 [ 568.505114][T10680] ? io_handle_tw_list+0x55f/0x5c0 [ 568.510401][T10680] ? tctx_task_work_run+0x109/0x3e0 [ 568.515782][T10680] ? tctx_task_work+0x6d/0xc0 [ 568.520645][T10680] ? task_work_run+0x268/0x310 [ 568.525597][T10680] ? io_run_task_work+0x43a/0x4a0 [ 568.530813][T10680] ? __se_sys_io_uring_enter+0x204f/0x4ce0 [ 568.536829][T10680] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 568.542755][T10680] ? x64_sys_call+0xce5/0x3c30 [ 568.547739][T10680] ? do_syscall_64+0xcd/0x1e0 [ 568.552580][T10680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.558862][T10680] ? __update_load_avg_cfs_rq+0x12f/0x1090 [ 568.564894][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.570263][T10680] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 568.576813][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.582188][T10680] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 568.588175][T10680] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 568.594185][T10680] ? stack_depot_save_flags+0x6db/0x750 [ 568.599926][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.605299][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.610671][T10680] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 568.617223][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.622588][T10680] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 568.628568][T10680] __msan_warning+0x95/0x120 [ 568.633365][T10680] io_recv+0x930/0x1f90 [ 568.637759][T10680] ? __pfx_io_recv+0x10/0x10 [ 568.642538][T10680] io_issue_sqe+0x420/0x2130 [ 568.647324][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.652708][T10680] io_req_task_submit+0xfa/0x1d0 [ 568.657830][T10680] ? __pfx_io_req_task_submit+0x10/0x10 [ 568.663574][T10680] io_handle_tw_list+0x55f/0x5c0 [ 568.668724][T10680] tctx_task_work_run+0x109/0x3e0 [ 568.673938][T10680] ? __pfx_tctx_task_work+0x10/0x10 [ 568.679327][T10680] tctx_task_work+0x6d/0xc0 [ 568.684005][T10680] task_work_run+0x268/0x310 [ 568.688792][T10680] io_run_task_work+0x43a/0x4a0 [ 568.693842][T10680] __se_sys_io_uring_enter+0x204f/0x4ce0 [ 568.699692][T10680] ? futex_wait+0x2bf/0x360 [ 568.704382][T10680] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 568.710940][T10680] ? kmsan_get_metadata+0x13e/0x1c0 [ 568.716330][T10680] ? __se_sys_futex+0x22c/0x6f0 [ 568.721368][T10680] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 568.727136][T10680] x64_sys_call+0xce5/0x3c30 [ 568.731943][T10680] do_syscall_64+0xcd/0x1e0 [ 568.736623][T10680] ? clear_bhb_loop+0x25/0x80 [ 568.741506][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.747626][T10680] RIP: 0033:0x7f0af0985d29 [ 568.752193][T10680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.772022][T10680] RSP: 002b:00007f0af173d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 568.780630][T10680] RAX: ffffffffffffffda RBX: 00007f0af0b75fa0 RCX: 00007f0af0985d29 [ 568.788764][T10680] RDX: 0000000000003900 RSI: 00000000000006e2 RDI: 0000000000000003 [ 568.796890][T10680] RBP: 00007f0af0a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 568.805008][T10680] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 568.813123][T10680] R13: 0000000000000000 R14: 00007f0af0b75fa0 R15: 00007ffdea0169b8 [ 568.821272][T10680] [ 568.824706][T10680] Kernel Offset: disabled [ 568.829096][T10680] Rebooting in 86400 seconds..