last executing test programs: 6m22.202203931s ago: executing program 3 (id=17): syslog(0x2, &(0x7f0000001740), 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7, 0x5], &(0x7f0000000780), 0x2) inotify_init() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) io_setup(0x7, &(0x7f0000000000)) getpid() open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6m8.694374751s ago: executing program 32 (id=9): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 6m5.142771016s ago: executing program 33 (id=17): syslog(0x2, &(0x7f0000001740), 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x800000, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000740)=[0x0, 0x40, 0x7, 0x5], &(0x7f0000000780), 0x2) inotify_init() r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x3ffc, 0x0, 0x1, 0x35, "ffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, 0x0) io_setup(0x7, &(0x7f0000000000)) getpid() open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11) open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 5m14.899327828s ago: executing program 4 (id=111): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4c094) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x34, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x24048042) 5m14.164060786s ago: executing program 4 (id=114): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000040)) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 5m13.090387795s ago: executing program 4 (id=117): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000300)="96cbe6", 0x3}], 0x1) 5m12.020982991s ago: executing program 4 (id=119): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 5m10.487928575s ago: executing program 4 (id=122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)=""/4112, 0x1010}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 5m9.475781782s ago: executing program 4 (id=124): syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) 5m6.243677484s ago: executing program 34 (id=124): syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="e90c610faca20180c20000000800450000250000e0"], 0x0) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) 4m12.332703367s ago: executing program 6 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 4m11.000739906s ago: executing program 6 (id=249): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) 4m10.270045087s ago: executing program 6 (id=253): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251e00000008000300", @ANYRES32], 0xa8}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) 4m9.561619595s ago: executing program 6 (id=258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 4m8.775934047s ago: executing program 6 (id=262): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2f0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2dc, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x13c, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x2c, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d8563c9"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x58, 0xd, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4m8.177593383s ago: executing program 6 (id=265): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x0, 0x0}) 4m5.097406783s ago: executing program 35 (id=265): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x0, 0x0}) 1m49.427911601s ago: executing program 0 (id=759): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffffffd, [{0xa, 0x2, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x5f, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m48.447838993s ago: executing program 7 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) sync() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0), 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c2"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 1m47.833570116s ago: executing program 0 (id=763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@remote}, {@in=@loopback, 0x0, 0x32}, @in=@local, {0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x1}, {}, {}, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x29}}, 0xf0}}, 0x0) 1m47.062491164s ago: executing program 7 (id=765): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0xe, 0x4, 0x2, 0x3a, 0x40, 0x65, 0x0, 0x8, 0x2, 0x0, @local, @private=0xa010101, {[@lsrr={0x83, 0x23, 0xbb, [@remote, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, @private=0x9, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @multicast1]}]}}, {0x14, 0x1c, 0x0, @multicast1}}}}}, 0x0) 1m47.058526561s ago: executing program 0 (id=766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 1m46.376147309s ago: executing program 0 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1m46.282936663s ago: executing program 7 (id=770): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000080)=0x8) 1m45.450279895s ago: executing program 0 (id=772): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) 1m43.853092803s ago: executing program 7 (id=774): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m43.751292656s ago: executing program 0 (id=776): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m40.608503536s ago: executing program 7 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) 1m39.263627357s ago: executing program 7 (id=779): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000180)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 1m34.750711035s ago: executing program 36 (id=779): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f0000000180)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@nojournal_checksum}, {@errors_remount}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 1m29.03664983s ago: executing program 2 (id=793): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m27.9099495s ago: executing program 37 (id=776): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m21.021087758s ago: executing program 2 (id=805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 1m19.99327096s ago: executing program 2 (id=807): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) 1m19.167666344s ago: executing program 2 (id=810): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa) 1m18.370913698s ago: executing program 2 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m17.191969507s ago: executing program 2 (id=815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x4, 0x8, 0x4, 0x344}, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 1m12.84095732s ago: executing program 38 (id=815): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x4, 0x8, 0x4, 0x344}, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) 22.355362614s ago: executing program 3 (id=817): memfd_create(0x0, 0x0) syz_usb_connect(0x2, 0x14, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc0fa3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 15.863785241s ago: executing program 1 (id=891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, r0, 0xd, 0x10, 0x0, @void, @value=r1}, 0x20) 14.992711426s ago: executing program 1 (id=894): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) 14.010427193s ago: executing program 3 (id=896): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7", 0x1}], 0x1}, 0x24048811) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8a2e, @loopback, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 13.825074463s ago: executing program 1 (id=897): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 13.00705946s ago: executing program 3 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x1) socket$inet6(0xa, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6d657461646174615f636865636b73756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c96a485301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19cb37b6975e95e26fbf8", @ANYRES8, @ANYRESDEC, @ANYRES32], 0x1, 0x5950, &(0x7f0000000500)="$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") 12.896825457s ago: executing program 8 (id=901): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0xc, 0x200000400000000, 0x3, 0x344}, 0x0, 0x0) 11.250554013s ago: executing program 1 (id=902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x1) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$bcachefs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c6d657461646174615f636865636b73756d3d63726336342c7f6174615f636865636b73756d3d6372633332632c6673636b2c6a6f75726e616c5f666c7573685f64697361626c65642c726174656cd6ee984c5f6572726f72732c7265636f766572795f706173735f6c6173743d7365745f6d61795f676f5f72772c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c7374725f686173683d736970686173682c000f456c33737c01c96a485301f57184319607791e0389515818ee65b05741a83e2d3412b274e683f19cb37b6975e95e26fbf8", @ANYRES8, @ANYRESDEC, @ANYRES32], 0x1, 0x5950, &(0x7f0000000500)="$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") 11.006744959s ago: executing program 5 (id=903): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 10.616493159s ago: executing program 8 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="0cd7", 0x2}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xc7, 0x19, 0x4, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.514766819s ago: executing program 3 (id=905): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2fc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2e8, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x13c, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x64, 0xd, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.135993137s ago: executing program 8 (id=906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 7.229920026s ago: executing program 1 (id=908): socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x90c0}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 6.658999349s ago: executing program 8 (id=910): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0}) 5.795885576s ago: executing program 9 (id=911): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7", 0x1}], 0x1}, 0x24048811) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 5.098221469s ago: executing program 9 (id=912): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.116870897s ago: executing program 5 (id=913): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.600280452s ago: executing program 9 (id=914): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x0, 0xc, 0x200000400000000, 0x3, 0x344}, 0x0, 0x0) 3.256004071s ago: executing program 5 (id=915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 2.91581678s ago: executing program 9 (id=916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="0cd7", 0x2}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000051) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xc7, 0x19, 0x4, '\x00', 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.515998364s ago: executing program 5 (id=917): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 1.83600083s ago: executing program 9 (id=918): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = open(0x0, 0x4000, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1.706924091s ago: executing program 8 (id=919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) 1.642255851s ago: executing program 5 (id=920): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006c00)="2d26cc01ce6b37509b6f3c3271a639de6120f14f3ce568149acc964e0ee361499ac494602f1ca27b352206b3d5119e1d3ea7de66a5685fb3767bbf2f5882baf11c24085c523b1e98c74dbfcd1cb5fd76fad4966db36d73be8fc9b83e4ef2ea9357b906217a92307828d026c0cd44b4722c2003c0ceea3c92f5f3752aed00f11d7b51aba4466811b4ed9eb0d48747cdf3452c2d0dbe20eb7d998ac3fdad4c2863d61b6d047479a71a456ad22e6310775f0d387ebd21b924987b5ad98209de8f77c5b4727a45807e0890d1978561f8c5d9b3e102e550cce491897c8d567bba6f1302bd6433f5e00b79e76dab18e7645fcd163ad9c87469ac1283f2480596ebfb46858f190530c959b851b61d2781eed6a70c81aec137fa36dda19c8229f34247ab38c623ad554d86ea1163fd1365636f82bde43701c35db16ebe8b78dd0bf7076554c9be2dde4e1ced09396dcd7af8389381645c388524021daf12dd624f2283b67a56dc9883788e44268a04d435a2ebecfdd1a19febe0cd07e432612964bca93760ae6bf8727e76d6336c41cd5818be142c8eeed82ee79c638d1fe5f19870bce906519e87fa17670658b2557f61655f2604522dfac3a9262353d1071716da574a7b7d17176ada75365d017ed36eb0e7c0467f92603e8c9b9d7ce19e257a18bade9ff6c748b6f05680ca2dc3765b694d6ef6a946f48ae396ae87ad5cd0ae01fbeaa86ef35fa0beb217fc9ffb07ea2e68f96d79b8720595210117dc40291f0bd588c35193a28735282d3a3feec8770525e4fc66cbbd7ec4f79daf66d6ba63b7167fae0f777d9ea8f179ae35e9a52fd7c984705251197b2aefd39938f1ae9f6a3665b94e652ba3bd759d8ceb444f098901e4d66ca6187eeb8c2810bdd912b797eb86b19232d0bc8d5c0229eae5373b02dae7df3e151061d232ed52f29c994f1209db3934ea41144c8064b14ced02a795e7b6be9cbf52f56dd5f7cf11f0a3714bf9b6df0b73a88df3224ef37992d55cca4d846a7e3ee602a66d6b29d32c6cd360cd6311f224d9c95041893c2db5266d480cff0bcd038668a26eef0a8d2b71c283cc248963aebb6d32fedc1859dcc0e025600923272b1418c5572e71d52205e57aa52daedff3fdf2839eb2d3af61a122e4e4896ac636e36f6cc7b2aac8966a83e71828a26099c09d893dde0b5b7fbe1ec3842dba88d8ebe74bbb756bf73b80902b1d4f13895881e2d4e3418ab760739d751142e6680f9c25d99a163a0e153891503539aafa1afb6604d69e8c0dd03e762719a96ae893f52d6dfc1a8da2c8f02f42682eb19e6cf35f7ebf3b26c0c0179188a68b40956c706616692f768eaf3c242a4c610d9a3543ca83b1fc82d4e526455d38f78880ab5f895afb078155a3f6910502ad33d677b065797da0d86aa084859275f9f100cb52c066b4cfa8211e4e9629311251a955fe9dd0a8c6a25f0d8cd722a9d176b75e7165945552ad1f70f29b3870db873b3e96ef8efbb52ff0a990b5cd3aecad4040328a8e201b9371d5dbbadcc38480310fedd4c6ec91e06d3ff1d3d0550fd1e85524a43438c58c672b2ebf1aae2c9bade778aa9962b81567fe25aff9258bc8ccfc5d1604d5fa1dcae07f7e73fed593790a97d24e07d55629d78c3db735319f76b898c05da1850563c834f58ca7c8b9e166329e1fe6aa507748f8c8f9c6d88102b7e71d4f525874176e5f81c8ed60d9a5c00f2ddbb4f61abbdeb9c5260e23ceb3b3b32e56acc2ba5be79dbd31e4e989ba5167ece55c24f1668ddef96cede1ec48e6d9839766d0937403ef978f6dae2ddc42df9f41ca651c9523c6e47de0efaf10fc4a6c73c778d893037fd7d0d889ddea60eb6488e249cb3ff5cdbde8bcda5ac522413c5cf924885b5d7df182304cdfd21a0a82cc175c4848974223c6dcce5184b8778f42b6f61e0bdf0275a0f5de737fa4c257a211501e68270b542024d254c7c1003d02c7d48e376ce49f5527d36bbcc9efe0b4b6a8a97e6b026463fc689bca5d7a039901b19dec935b7356dfd79139365522fe3bace08421e7f87aba615091cd4d7d599452a18cf8d823e648da62d9839abc0190dc0fd48a0bd4930ad4c8e942e6e9c8f1ef052ff37009fa5fb91de8ae19b705f439d08b9a5dc4d6da4ed11daf7fd4e900eac7ba57bc21619b9e80583c465742d28c90548b95783d1aad439a4ca8f6097040f4cbd248f030dfed89e454c6ce1e70494cbeb949dd10c7600a8849e9455f8f649f6f3687d2c096f0b0d17687babafdd28f28e0e30f667b224dab25db70379bbf7e67972e6b55d82d78a7825647380958562c97b6241f726b96d2f10956acf4be708f5bc243c4fbab0d925db08f39b7f7c437c822b1da42d414acee547d01cf491a7e5a25df27e77c9aaab73240ef2be11fddde672bc865b1c0e75edb8a5ac3c7140bb3e002a6a7550e380a78e6e011aabaa0b1a7d1487111a65e379a9f91fbaea6f053097fd2689e4ed3801534f09d4819ddbc30273e2cff2fd5806f76598af99c98c090e96c9e933038504d9ebb9350620fb21fb5e73a1ca138405a95a99b46a4feb30d5d669df45304a97983abff8afbd285986eff53ada03d97821d7ae02aa4335b767ac1f9511a5bf036cea28481ca2c4e2ff3bfa2823897aaf91e208a9146931877727d14a9fe8f8ac41c3a9cb755a12d7bac4b44873e74f2eec90fb0e2ec5aab6f86fca95055f6bd569139f6c0fd665c19ab009f56712fd49a0d885d3f5322b4b9a4e22721a72eb67120945d1892b1c17eecbbf6390152224675f7e649ecfedf540721a7d93164a9b57d9babe2303c1707012679fb1dcf39477baeb4a0e1278551fdf81bddcd704d174f553aa52d12f3b76c7b3b0469ac4d83af36a23b35ac382f870716bd39662ba26db1066a7ebe80b80aa4cdef24fe85cea7330e35dc5ae8d606fec19cf625d2fc5b2585ab1b2e0a88a0683a65dd96eb9342759b05baee428e93ceb970964f564f8711b3b0b53e90204d5510cb6ec9dac41fce8d4c3b22e86f908e5e22db74dd023cf1ac1ae5d22990b48d2a58434a3781cd8c7b908328ea1dab8c39ce6c923bc00c3958fda0a5a3887f4e5db3d99fe003b6209d953033ed2fd941f05027e8b68e540a5aed683305c420200474cccc0927a8bb54db7f29e02cd3c5e96ee083a86a7f7f503d7584b403737a8c3dab226d0062725a1c728cff5accfcd2868e7b80c88032a579d7a949372b3fcd3089bcc4cb191f9f54248737d2df53f8d5ae20df8e72da17c118131464f7ecb8d6a49841b6fd31791a76329f825fb1fadb272e766caeb8ddc8d68e02ba1e771067fb2dc0718e56d42b9c6e38895b090789385dac2084e0bdb4e2761f6acdbfcee84616becda8120b504875ce7a8cece84003bf177980b31ff05ced419e56cbab005a1bce73abd738501999e087f652817e5dedc4bb2dcd17766208c1591dff39d90c0315583aed64fd31fc1c1e4a79a0770fc9d5afa63aa168c17e63e1ef7bc429e7d2e1d5aedf9ba18180ab774135c90304579025624573aa7daca58d78184d27e3d272727930623c9721f33b001ccae2346978ff3a58335882cea5aa5b6b5344b662158d50de72f89b8c63ed195361745e3f2ee55f76373206e505248ed68df928d1675585592404c0f7681c859fc6e93a4e4dbf51a813aa578d39a0a8d8ac17ab6076f11a6359bfef5bdfffb33a54ddd749440fc7c9fc013d8f26a505970d703685e05b56261bf3611ba5a671e47d074f72b92c7faf7d8a0ec92ed91e59db0d3f898dbead8ee8fc4a45c3479d1868a1262d1829983183537f242180ef31b75e1449800731c8d2d165a5975428d670d02962539d6aed9d193cc21c6a735a440f41ea8ef47e3487dd8aaaeef3704e9e9f9dc5d41dc75af98174aa1060056c8d0c4d3cd95db1ddd5f6d268ca5019b1e7b9ba1e927fabd22d02e23ba9738a5dd0a382156d2e1fd8ed638b70fe7feb4bbc7b2c6df06a98abccda2ca150830e1ec82d416767d7a1b352b65ce711d9e977446d7dd13be7d4d5969a8874fbdc9612dd710ca84fb031acc4853656e8069d7b5e3a922c28f724c0dc306839930b3f816ade9a9c155e2e661e2088756206f9fe6cbc91151453366de83406757f9d932aba22a09028b65df8caf4bcad4b8d8a1935033cb5f53b778b56bf8b4dffe2bfad7f63cee69ea6806d5d1fc2b7ae7d8af7bbf0bcc16905e7ef7cb548850f6414f6bfb6e6e72ffbb0753de68f0b3da9565c9b48ce59630ea79e24e3cbcc4844be1b4ef8bb6c387ff5ffab131a543107b286eaebfa12f7062bc85438ff93c2e74f538bf3bdd076cd6c10cf5ffeff59f3ec2ad5df6c57c41369c140afe2ef51edfbaf75a44d0d429e49344d4d5bd71992b8d721cc85d18dc91c145dd06201748af2369f2740ef43b51736122dbb7cb0fbf960f512da84a7890865044754db004371f0bf159da8b979d696b978bdcc27ad5fa0f6c91dc88174d5659925058e9af1dc86f7958df96b99ac5a72a82c6f91053c5914f571ed507a5e70a22181f64ef3653730e063b3a7109ed04a461b6b4db21d148b57ad13f566707c6e9bafe95db4149768f1769c1cbf2b02e2ddd0ee2c814892fe0e289f14aeab2d004cafbde45c033269dad15b17119c909b6f298e14e55c26bc7426d496d1b179522a383cd521386ae4ff347b1929cefd9ab9de96e8eabebf23b556106ee0ba09290b211b69cc4e313916c9fa4c4348f09ecb59d0e3c13b994f1369212b09f943b5c2f76b371efe46e46f095e2f3fa6f20b30382c518d3cd9ef5a46d26fef874439f46865ef3a59c903772747b2c762f6c890b7525aeb8f2d6beb828d135225a371e5190e5035cb27cd373185a02328271bf50c1767836821f37466c9e03f6f42f4fa1d274b27171acb209dc09e812623f6d8776afdeb6fc472c30d8cabcbd07b01b37fae778c3488f226f4c37123cd8e9cf71012ef56b28154f9078af0532d1437e953508bc0ab03b49e9f505671a77521bdfafa4b6f753835a690c7978f9cf34f26bc2871d393dc8a8b5ac47b173e0e9815e2e6b95f18f35aa0c09e8000184bb3e23feefbfce17d76099d860c1e56f8f0b9175fc5bf28ea7907702d09f4e16cd46a97a114a1dc8a920b7fa2a12108a457cf162972eaa4e932de8201655a07fa2b0ac4fb14a1e0c8cdad2abca0dbff56a438f4c159dc642ea870cfec5b1c88a2a5aa7f0840569b04d2b9f9c42c5c8673f0ccbd33a0090cedf45308be4ebc3786f87ef681a259ba08493464a97ef7768170b076cd2244880d2ca6a4444aa6e72a6b4ab477ad6fdc2ed90f6cc60581628af3be7fa65bd62c2a5110ef7637468966b3a285ab03ccdca916e2f372249dada0bd6358e455c819bff8258cefcbb4e24a96a3b448eeb1a6a519985937d73660e6396a9109db8ee81f34389e502beb93ada948fe3f9acef781e5d13ddd5eac03fa2983d06b70438fe08c9fa9b134b74b56449f77fbbbc8f292c44b63873ea5847cdbfdf8ab8771c899ffb8df1674529a5bcf8f0bec4aab5489e867599b2a3458a2b40aa0ace5d261037d23bd989d5ae52962c5535d8ea70d9e45726b1b2fa30c276efe7a62ca7cefeb173bda25ce25a03b35e838f5519e50f15dfdb238fdf4af43b630ab480ede33aa628f06d398063cb076d91566077b0d8c8453ee570bac9cafba229d0f633c9d471a5c9c7f192b24d4700dcccfdb27fdfa6182958f99606ea45bbfb9ed2e6cedcf1e7cabd4b293dfa29ada8aa30c6de2e5e095e62a71f1d8d8220d0db1335d76186926240403a8b16199b91908950f17db4528fb1073f87930a4ba5aee954d4f4b7bec5c2e308cc03ae37cd45c2b1b47437e2bf0ff22dc2c6d143f9ac26a300127385413fa17da98d4a297266a7f1b4e5324597d5a2db3613371b276c54b639faf2aa905da9c427f0c84f3f89ba9c74fd80d1aa9c9b7f353d5e27925181db69187a6b59f740f1010e19105a08f04a60682f697de7c47d7caf70a4b11abdff68782cfdffe179305eedb4d7b2cbfeaefa700578d4ba7af985de0e86a9b6e426caab6fc533f4973944f425a392bde65ff416f001320c8dc9f9e15a02d406cd8e814f14d6a41e34cd1e6662351415c47e974360383262acc2915505211a8ade7947a0e8b84da30d1581c4323d785ba20108c5027d5ed2a866532a520196074dfc13968eb349f3356fd5e2cd329655eba71f7662d6e5f80cbde2c7d9e3b60292545db3f690b1abbb40426c210c887897310d61abf928cea3077c1d23f34a101f9683a838cc3aaa845c1600a7c6ff2119442e4848068866486a03ca990555f68df38a7db77b7cbde80034a98755a75e0e10f4956d30a3ddd1a948debdf8ab12701cd40053ad5ad52cfe2339a8716385c56337f70e9297b284beca7a3e5ee2711914bf324241426e90295c1bfa63cc72916500bef28676f6fed80bcbd40d49cf55a54ea59abdb39efee7cdad3fdd923920b28d972eeffa33fd8fb149d97ce99503a7a93d7c50a57bf3108d98c296878b029f520fe6279dce6dc6e07d666c0e6e8f7bd58a6acc3550655ab39a3b3ece83c9bddbb9beb81c33893c5a2b9ec8d1694caa74116e3d9431214ab80c65828de6d96072abcd54f368cad8ddc49cf1e7abbe6ea294041e4978f93e2d85a8b583d3611104380ab88d31ea1bff104c4d75d875ee48e6070dc96b7f047db1f2564b18a84267c260767b6eebaac705ed70f1ddf11e23681abe60454b8b368308305f531435020645fb830db063016a44dfedc83c0f5e3aa19ef03186acbf82c96de8ad1d9e124013fcddedddc556ba439cb54e5e0a8d8b1a5c8dc7f80fe614ec2e064a09c61d7e0f0895880c6b974e51f0f84028893aba952ec173645c7d76218c38d843fe17beb6411b107578ee9c2f6c4d6bb1cd3ac1d52a2c34f7b2bb06110929f4be7392c59bacd8c31a6f4c0dad0f459c124b0cf09052d650f09792bc50b2de95d7d3fde459909040f3b2afbd3d800d6c6011016b640b08007e4c9d0002054d99acb733a50152f0f1df5c688f974ebcc1df84b792fb44bbc2a1bffecc42e2a3517f9564abcced05d61951cc5795b868dd6d06066e53121236bf2e16e81275e9990f0e7fcf61438d135cc7985a7652407ee997dd3ad280961769c663b92133f0f70c6a57a6412a05489b9a7748881f547690980bd9bb80bac5ee027eee0feaeac35f429feabbbe2a6f6130dea41d97408656ddc6612b69edc2762f953fcfc576cdb36080395d3cd156223ec6abc5140d51fd033069fff8bfbb39c184e90febeeeec0b28c3d485c211b1cf38e8f136ad87f9a0d292d734f3bc7bae81c7beb3f38665eafe23bd08a86c3d0b1e17c293a57e23d81116a450f1c8351715b6253b50b0ffbb220f78301c965d75eca037c1063dd058231ae6146a3565c82e693be55d2768fab4e665b078834fefbdb9d85145beffbf3b6c2d9611e2720d16e31da23af324defa1c3c3567aed0f8cf2a3e9fa11a7f7b19283edbabc76418a5d41100a25b19ffddfd7f36fb2702358d6bff6971c76e545505eb41a95744d194c69aed3280cc9085a6c4036ff9660b5186c5f01b8ebd172babaa91c0375ea97b3e6d47cea54cb68e41c6cae779e258789ea1fad8db2cd119b31d85d6e67f2e1c19009bdb11ae01f434466dde69d70907bd875c53a3cf94e3d9689d614191b03186abd29a4d235a77b282618d7482342266e7ce38f60ff895a875aa1fdfb104e3812f852129bd0553fc7bb602f81fc401d7acea120bcdd3673f621bf46c1289264eb1c96051250a847cd4b3a19cdc5989093a303f1e4c19c9bdec9216888dc91a82c5063aa33b3f9d8106369b201e9c08e9bc1e7800f535f4b15decb66f9299c9d04a93783ce5f3b56a3d6deac8bc2aa09e48fdccbf5464780cb2caf2264202215299299f88c1c49f11d4bb9e0aec61960e22207b09502cf76bd7e626daec4879d2ae2489ac7ea51421bfe262f603d82f23a3924ebd3fca893c69cf2b5d1549930bb1e00a48a1d14b7ec5bdd9609f26a3a59af6e2451a2ebf90ed51193c49fff7e7bc36088898f9938e954a4358549f9a735f1fdb00bb00c18969203db4d77c881e633e3a132c18fb2b7b43bf82039e6ea0d26f5b41f9f10cf2fc06b1b694381291d66bd8ff17f5963cc4242ca63c4a7117845e5159f2f79c5cb1c86f1c4a5d2048bd2eb7a4094b3c87c595ff5394ace0dd166a845e7b4d5541d2f7ffd03834522e250dcf78bc17456de27a8213e57e3a009150d14994090d9b7ea8a34f91eb94dc84a52535ba084bddbd2a4d411500bbfaa4dee89f48fd31cca8e59e10180245b3b15c149fe74b4933a13f94f7d2bc72b8724f3f092798cd53fd6baac60ea8ac402346ee68bc1dc7087265f72e93a3b4937422a7799df7d736bf6e141d3134ed3e92cd77aed5a0d583935c4b80479b85bdd8d8c4c5a0c3a43e205682a201d0dd08ba2ec527b649418753509a200d501a29193b1966e546cb18b051293fb11fb76f3bae800943ee26525fda6f89c09cf69aed290ea794facfffda2665be566ed01dea1fac74b469aa1ebd3e3df2506dc30716f524c69c9ff3b131e574b158772d106338944264ce49d0f7d5f01e953a0bfe1838189d4c2457a788d6e6959c0bcdebcaf1a2f6531986e24e1f447fa81bf5ce0cc3c4714e83c53770d4b2db0b30838001df8124dee57e37034306bcac21ec01d22a5d09d5dcfca61f57af27919c8cbc4ceb8c24fddc020bc0e73367f1af47f53ef00642cd352a7ad3648b3a30b4f64ebd13ab683d3c09abf15d79017fc7430f5f0dd6c7dbcc0cad6aba3737c8c16e33e26285436bb5e56420824c857b31f4819a09eb05f14085aa577faeaf69a05bcc092384bb3830c491d689b2c86554c452661df39b38027e13a47817b988b884b2d0f5b2a6a12889654a1e7eba5ef0e1303dc520677475f2133ffbf3146fd98c2746500951df98ca6ef4f1687750c6170080be7a8e3371c146d7a88c8557a7cbe269f1373093e3611cccb57d22df0e23524a1b4b94eeef7538abbe3b8fdcc963b2fcc468cebd8b0a8bcd6f274687ec0d9aeb853efd713327512e02133ff0ff4f120fa1a31a211a49df20a26a94a6cb9c1d0d1d34202e0a7880b46437c552858ccb9b6326c04a1812e7a421a6a13aebae9a2da5b2f4656f09b191906e9104c47bf46c73acbd1224ffadedffb109f33a7ae083216bacdb3908e2d0ca495b2e287118c78971a722b948f8104eae41531e33d0efb19c22b30f6683ffeba7e4fd5393561fddccc83c0d86116feff95f540d765c8a95bb536a4666a9bbccc1808a3cf89b5e03ecd6b1b6fd4664d91b00648902a56260b7ee98aab17ac01d311997083652ae01c8be7c59c3212146314c214d41b90b7899cc2a63e23b423274d490b02b0d71f690fffe980e3377e9b08cfca0d179a7208a046db03c3c7142217fbeb5fc71d280c8a2ccbb041f261e21a97afcfe674b273eef3e78c2d2b6073707a073b7670eb014883ab4edc6a0f9e3e0e04853998e60d574440f5083bb57fcb1d1bd6cb079afc991dae4a60cf4984c1bb2f1c64e1eca7d82990fcb1e049c2642a67ff7c6cb0f466889de44c9ca03313b0b751daf08cecc3fdc4c331c5c9b88def5496df0e49b19da5ebcba58e179ed26ac4063f264f5a5a79548bbf1cca727c120c24158be0fd827094faa862c08523cb17fbd93a54908dd16376054c6128985a1c0560cc9e71cef1e5c3b880473e6966e5b5a9c70a19c00c0fa6d689a38ffba05a5ff12afbd1f3af4b4c82c5ac1edd2c472e069d2915e0575f0ac4e2e6bfd1f6688c718c9b1726a9d371f312ed9b97146d5b67d2f4d0efc138d02dbc8b3a3785046de67598257d1d2a0958e88332a1615c3c5018259450277afed9985db88c0aa43fa505df62e92004e9b1df2e39e849ddf575836b8ac3bc40135d40f08d73d1a0204d5efc2e49e9ce3efecc16f30cd0e429d05e400307473025ef82d02c984c09741b9132f8e1657ef34d83d033cc3caa4e39a95978f7f49676d4ce8500bf1eb2835cf6511b3b7cb95f6a8f07eb11afc9ba3c47a2abcb46011327b51756480642397851d17f12a965f2f70a37453dca4d49045be6609cfff85e03b73ac57e4ea01b2797a3c6ad90e470cdd57939754c77b018aa76b1189805a5e84f91b42780ebd0d3f6cbf6810bb723711274a6b62a9692d2a78819f0a154fb2e04f5ff351797d28647ef80b8b56d7ae2321fa00c5c592ffeae0f24f8234b5dcd8c1fc07bac741d137f81359439b86e36482356884617bbda271e8fb9b433c8b0c5f13635c399a502ad8fe5a79f6c8215cf330b1513a196a4ffd2eb122175eb6a5f3f877d041c5aaabb5f8886a2961c9fef111e2a9cd1430cf19e8a4d226a872f02f39b40e8137545d4a5f286963f07461e4356cbee3b1765499e3934cc797b4fb4417c0579af3616fd4c0934692a4dbfc7e83b06ff682d3a053e956ce77ca7b8c0c2c53492511c574e0d740678bb9dec2b560d203254df4166f1fe30021ca38d9847f55b81709d4c0997f921ad92be18a8d4b57f4f7cc51b389749c7f471bc7fd23b1cf0d23ff75f6119570be6751d7b75336f661acd31a98061bf9cc86c33f485c21b4056ac5a4afa8ff2c4337fde23699aececc2ca7aaa4c85718ce3448d411cf8055ce0c29938753e35299d3626eb9e51985aa32ef188078e7fb6e06f8a4e91097a801971980c3d2550084c3aded3ed91d0f8c9406c72d05fbfb001a16fa4eda79d28cedc7658dc6477aa421c1c665d4cebe52edd9908a15f79aec6b99c48369bb7387c0e78766167e822f30b683756a74e5cf9a37f8467005350648f19d09fe48087106373be6cfe200adbdaba2b88f49ef1eee09ac5b0b70578acff805c613c052bd2c5a1d592722d7af9517722957359a5153bbce4eea5534f32c0ba633fff1ccbc178e526fca7a9f33de778c6a72778d74e1b344335d1b646f43488d4a63ab1ae0635f4d94d571f4071493a097dcf3767c816c4f4b1ab989ad9e9582db52dc26dd8a3ae617633167d3416b59fc5b3be2fe373a540c08f3ee68e88642bd19d96bfe275a54967884735146b51cc6e3105c6e94970361b521d8353a9f85af3be1d8d6ce653dbf405e3e9787fd7a7c8343fe3308ab6ad676c2e3bde1adce2679372bf8ed3e046989707091b58cf6b8b41a0dada02a368494c7a19a8ee65c776ee145269444e3ae3ff86f5e6711f08f1ae1f2d586370754ce73b52656309bd2f2445770554366f7ba33d9bb7a445aeafc7f7e356fa2aeb73dba6f9f474a12b641188c3445b52aa20f7d9cc698070825b7b060c23eea2ea559204816fd5a049896c5c1b386a628250b9e83f029210a42ab36af3f2e5775bdb4b87115d14d6c251631ac8e85552ce8cbadd363d87f1f0f27aad01eaadced6f8b00b0afee08687cad2b4806fead3166a179b155b9bf3d96f40f3b18d241f25bb17151fa1485fe78e89715c7333846ab61e2640f321dd51f5e09ae057e79090616582d72df5b0f4afcd9120b5d9b32bdb9c85bb7204f66b440fee15de805be7c5084df778a5a7606505c1c", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)={0x90, 0x0, 0x0, {0x1, 0x0, 0x7f, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x20000000, 0x2, 0x94f8, 0x9, 0x0, 0x6000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x1dd880, 0x0, 0x0, 0x0, 0x80}}, 0x50) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) 841.536884ms ago: executing program 3 (id=921): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="626172726965722c63726561746f723d30c6da432c6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nls=cp869,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00cda88eef6460690a64e8746bfb2b58ce0f9934b742a306036dc0b12a28db4c7ec38aff23528c0cd914221851f22c6d7152cda8"], 0x1, 0x5c8, &(0x7f0000005440)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") chdir(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 432.739483ms ago: executing program 8 (id=922): bind$alg(0xffffffffffffffff, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 278.935619ms ago: executing program 1 (id=923): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 18.425543ms ago: executing program 5 (id=924): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 9 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000001700)={@in6={{0xa, 0x4e24, 0xb, @mcast1, 0x81}}, 0x0, 0x0, 0x3f, 0x0, "f1990e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae3d393dd38ea6c02965c6776267517308a3d40aa1c788df600"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000740)=0x4) writev(r0, &(0x7f0000001400)=[{&(0x7f00000004c0)="e41cdbf161be3e2ef03b5091e7c02394c1b045ecf6e191834738f71ecff73aaf2a6ca218674d52892bca1c76c3374978bee4ee976f24220eb138a0157f14f31183f233142c9188df", 0x48}, {0x0}, {&(0x7f0000000780)="4b97f8be3e319c7692ceeeeb0fc665c1bfe72483a1b330edbc0efcea1c0f1fdfc555dd99a72a684c6546bd31536d0f6be4e7671f93f6bfa53fe2908876465e572a62493f9a96460d373db0f18308ff9781e5cdb4e65fd84a4846d7499ac57fb6394d7c3b315b7f2ec29412d0fb30fb60ea649db212700f223662bd9c7dfbd5b78d5ecc34a99c728072ada8b688a83f38ae4a34a40d360d5bf9dbae42d07595bdaf0f89247e1062d30ddebc047d5bd16d8287a5e10069c380160210", 0xbb}, {&(0x7f0000001800)="c6c4dd44da9f6061a68271a90443b0b65b9f254228815e0b4899f22065ab2bebf294b4125f55016f159843ab9e1d480108553e785f260abb37ffd12f03e1bf36792ac35df1355b93b821d4a29cdf851569ebb691346c0324d2dbb8ea4a57c3b54ad2b3cde6bf4253a58bc7506a680056dca9a240b3200f9ac27e0cc1536423f98382e868a8de6878129b96a0a1cfb76681afe912226cd35c468bf92d1f4175ca40f7b550dd076410cb7a63af942ad2c6909b2cfd85c5b4ef3f6dc632b835dfad689c76697890c49562433763f4457c2fbaa2f5e4673a5bf1e2ad24dd15cb480d", 0xe0}, {&(0x7f0000001600)="8ede3549c5f3dde9186b965f491b62640f4f9a50131e96f875387b36b6c5d8d5bd8259401b69c507db8f29d6a07938793e0941ad63a8c8a736ec31c3c989dc105ecb057b0af62ab2cabb2bf781d42744c4328eb429256f6eec6db2f717d632bf7f63c0ba7b5ffd07de828f2bc0dbc2d0a50ff743315aea4dc390f39c4b2f05dd4ea73238f0726db6342c819bbcf526ba16f141bd78e18bb2d9d08c8dbcf46f7a0a5259494cb3bf", 0xa7}, {&(0x7f0000001140)="ca55560633d9e55959a61f7a94e1505c6ed53e22cd46e1d0609e70d3d95ae8192f08db8b00dedad47eba95fe87895f9ab139f1a656f009962cef1c3ca5b483630ca2ef184d83de890b86833aa125c7eb6a8cda87e5043e2401d0a1ff1aebd4cf98d347a539fb7442c49421103b23c161065cde0055afe04a80f5cf42e12a0b4634ab3217af3d726f94c9503ea027c4780c24ac5707974573b2dd20e31b754fed74da020238274503d83c8865f006600d8ba08c3e8436cde9b19f16fd324d2bf0", 0xc0}, {&(0x7f0000001200)="8558ba6560642a7efb760017c3b06ff184b806aa456f58eab3cb93510741a9f8ea544805d0053d808a658d1ce0586d8d50a939196bf2b1d311253751f6188e951232e8da305d14814b84eed25e7f00ce81c990cb1bb4ed5f404e377d2fe1833f2ad85e7a4dd485704b8cc3a53fdce552ae3ecdc59a17d26020c5d8f3c89a07169a4896a429a5c6b19b496707e88705257100b52cbcf184991fd142c696a3d10e8a70f726abf85e172df9480b164463", 0xaf}], 0x7) kernel console output (not intermixed with test programs): -0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.341511][ T30] audit: type=1800 audit(1754508898.855:18): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.153" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 326.467983][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.061564][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.103815][ T6581] hsr_slave_0: entered promiscuous mode [ 327.117695][ T6581] hsr_slave_1: entered promiscuous mode [ 327.127335][ T6581] debugfs: 'hsr0' already exists in 'hsr' [ 327.133641][ T6581] Cannot create hsr debugfs directory [ 327.356726][ T3597] hsr_slave_0: left promiscuous mode [ 327.389406][ T3597] hsr_slave_1: left promiscuous mode [ 327.430823][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.439847][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.509517][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.519137][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.753010][ T3597] veth1_macvtap: left promiscuous mode [ 327.759056][ T3597] veth0_macvtap: left promiscuous mode [ 327.764976][ T3597] veth1_vlan: left promiscuous mode [ 327.771745][ T3597] veth0_vlan: left promiscuous mode [ 328.539647][ T6696] loop0: detected capacity change from 0 to 2048 [ 328.861023][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.396787][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 329.403133][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 329.448298][ T30] audit: type=1800 audit(1754508901.735:19): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.158" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 329.873888][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.069009][ T3597] team0 (unregistering): Port device team_slave_1 removed [ 330.106907][ T3597] team0 (unregistering): Port device team_slave_0 removed [ 330.745747][ T6714] loop2: detected capacity change from 0 to 1024 [ 330.942004][ T6716] netlink: 'syz.6.163': attribute type 10 has an invalid length. [ 331.044425][ T6716] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.047997][ T6714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.055147][ T6716] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.092864][ T6716] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.100779][ T6716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.109974][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.117807][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.141546][ T6716] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 331.913720][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.292013][ T6576] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.394437][ T6576] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 332.513032][ T6576] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 332.712629][ T6576] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 333.749345][ T6581] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.863281][ T6581] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.984038][ T6581] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.108440][ T6581] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.439945][ T6752] netlink: 'syz.6.173': attribute type 10 has an invalid length. [ 334.440560][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.441362][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.586900][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.801057][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.937541][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.945315][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.100721][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.108419][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.390078][ T6757] program syz.2.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.163804][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.473444][ T6581] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.592131][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.599931][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.808192][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.815862][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.982554][ T6785] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 337.991308][ T6785] bridge0: port 3(team0) entered disabled state [ 337.998693][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.007429][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.038965][ T6785] bridge0: port 3(team0) entered blocking state [ 338.045935][ T6785] bridge0: port 3(team0) entered forwarding state [ 338.054190][ T6785] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.062049][ T6785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.070921][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.078781][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.104709][ T6785] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 338.550861][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.277986][ T6798] syzkaller0: entered promiscuous mode [ 339.283846][ T6798] syzkaller0: entered allmulticast mode [ 339.771358][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.940126][ T6805] loop6: detected capacity change from 0 to 2048 [ 340.064886][ T6809] loop0: detected capacity change from 0 to 1024 [ 340.161941][ T6805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.321382][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.407012][ T30] audit: type=1800 audit(1754508912.895:20): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.187" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 340.945252][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.050040][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.188230][ T6824] tipc: Started in network mode [ 341.193558][ T6824] tipc: Node identity d29c9032a8ef, cluster identity 4711 [ 341.203787][ T6824] tipc: Enabled bearer , priority 0 [ 341.281095][ T6826] syzkaller0: entered promiscuous mode [ 341.287320][ T6826] syzkaller0: entered allmulticast mode [ 341.406824][ T6824] tipc: Resetting bearer [ 341.450046][ T6823] tipc: Resetting bearer [ 341.536617][ T6823] tipc: Disabling bearer [ 341.577763][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 341.747171][ T30] audit: type=1326 audit(1754508914.245:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 341.771832][ T30] audit: type=1326 audit(1754508914.255:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 341.794456][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.855698][ T30] audit: type=1326 audit(1754508914.325:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 341.878149][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.885191][ T30] audit: type=1326 audit(1754508914.325:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 341.909443][ T30] audit: type=1326 audit(1754508914.355:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 341.931803][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.083482][ T30] audit: type=1326 audit(1754508914.465:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 342.106965][ T30] audit: type=1326 audit(1754508914.465:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 342.129380][ C0] vkms_vblank_simulate: vblank timer overrun [ 342.136000][ T30] audit: type=1326 audit(1754508914.485:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 342.160970][ T30] audit: type=1326 audit(1754508914.485:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38198ebe9 code=0x7ffc0000 [ 342.699894][ T6576] veth0_vlan: entered promiscuous mode [ 342.782940][ T6846] tipc: Enabling of bearer rejected, failed to enable media [ 342.806482][ T6848] syzkaller0: entered promiscuous mode [ 342.812483][ T6848] syzkaller0: entered allmulticast mode [ 342.828467][ T6576] veth1_vlan: entered promiscuous mode [ 343.005041][ T6849] loop0: detected capacity change from 0 to 512 [ 343.148349][ T6849] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 343.162252][ T6849] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.172706][ T6849] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 343.414816][ T6849] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 343.452793][ T6581] veth0_vlan: entered promiscuous mode [ 343.466553][ T6849] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 343.486013][ T6576] veth0_macvtap: entered promiscuous mode [ 343.504242][ T6849] System zones: 0-2, 18-18, 34-35 [ 343.514196][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.539458][ T6576] veth1_macvtap: entered promiscuous mode [ 343.664052][ T6581] veth1_vlan: entered promiscuous mode [ 343.808946][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.925768][ T6849] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.194: bg 0: block 353: padding at end of block bitmap is not set [ 343.937618][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.055295][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.055602][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.055814][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.056022][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.062212][ T6849] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 344.175902][ T6849] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 3: comm syz.0.194: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 344.202417][ T6849] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem [ 344.237892][ T6581] veth0_macvtap: entered promiscuous mode [ 344.348095][ T6581] veth1_macvtap: entered promiscuous mode [ 344.574651][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.641943][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.691261][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.700844][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.701317][ T1015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.701626][ T1015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.701852][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.249611][ T6882] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 346.638164][ T6885] loop2: detected capacity change from 0 to 512 [ 346.783386][ T6885] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 346.793204][ T6885] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 347.151701][ T6892] loop6: detected capacity change from 0 to 512 [ 347.213192][ T6892] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.213320][ T6892] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 347.323469][ T6892] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 347.363364][ T6892] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 347.547285][ T6892] System zones: 0-2, 18-18, 34-35 [ 347.630653][ T6892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.107995][ T6892] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.203: bg 0: block 353: padding at end of block bitmap is not set [ 348.152080][ T6892] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 348.265218][ T6910] tipc: Enabled bearer , priority 0 [ 348.342730][ T6908] syzkaller0: entered promiscuous mode [ 348.348702][ T6908] syzkaller0: entered allmulticast mode [ 348.440963][ T6908] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 348.525082][ T6908] tipc: Resetting bearer [ 348.532616][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.606745][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.650528][ T6907] tipc: Resetting bearer [ 348.711545][ T6907] tipc: Disabling bearer [ 349.796737][ T6927] loop2: detected capacity change from 0 to 1024 [ 349.880350][ T6927] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.947929][ T6927] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 349.991727][ T6927] EXT4-fs (loop2): orphan cleanup on readonly fs [ 350.074114][ T6927] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.208: Invalid inode table block 0 in block_group 0 [ 350.151983][ T6927] EXT4-fs (loop2): Remounting filesystem read-only [ 350.159231][ T6927] __quota_error: 4 callbacks suppressed [ 350.159315][ T6927] Quota error (device loop2): write_blk: dquota write failed [ 350.175270][ T6927] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 350.187767][ T6927] EXT4-fs (loop2): 1 truncate cleaned up [ 350.348899][ T6927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.784046][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.970091][ T6953] loop0: detected capacity change from 0 to 8192 [ 354.394157][ T6965] loop2: detected capacity change from 0 to 128 [ 357.849809][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.856688][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.226859][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.234910][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.597367][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.605669][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.999219][ T3691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.007759][ T3691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.042100][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.050997][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.512760][ T6993] loop0: detected capacity change from 0 to 512 [ 360.620366][ T6993] EXT4-fs: Ignoring removed oldalloc option [ 360.771009][ T6993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.224: Parent and EA inode have the same ino 15 [ 360.806846][ T6993] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.224: Parent and EA inode have the same ino 15 [ 360.900788][ T6993] EXT4-fs (loop0): 1 orphan inode deleted [ 360.910500][ T6993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.034937][ T7005] loop7: detected capacity change from 0 to 512 [ 361.100586][ T7005] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.213208][ T7005] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 361.276485][ T7004] loop5: detected capacity change from 0 to 512 [ 361.375960][ T7004] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 361.387318][ T7004] EXT4-fs (loop5): failed to open journal device unknown-block(8,3) -6 [ 361.420485][ T7005] EXT4-fs (loop7): 1 truncate cleaned up [ 361.430651][ T7005] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.494110][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.182681][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.136891][ T7041] loop6: detected capacity change from 0 to 512 [ 365.159301][ T7041] EXT4-fs: Ignoring removed oldalloc option [ 365.471325][ T7041] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.236: Parent and EA inode have the same ino 15 [ 365.495424][ T7041] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.236: Parent and EA inode have the same ino 15 [ 365.571097][ T7041] EXT4-fs (loop6): 1 orphan inode deleted [ 365.580408][ T7041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.304216][ T7056] loop0: detected capacity change from 0 to 512 [ 366.318697][ T6131] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.414737][ T7056] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 366.423859][ T7056] EXT4-fs (loop0): failed to open journal device unknown-block(8,3) -6 [ 368.597505][ T7099] netlink: 296 bytes leftover after parsing attributes in process `syz.7.254'. [ 368.647371][ T7100] netlink: 140 bytes leftover after parsing attributes in process `syz.6.253'. [ 368.935882][ T7103] loop2: detected capacity change from 0 to 128 [ 369.108751][ T7103] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.218144][ T7103] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.318887][ T7103] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 369.752968][ T5816] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.923594][ T7119] netlink: 652 bytes leftover after parsing attributes in process `syz.5.259'. [ 370.649803][ T7129] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 371.196662][ T7133] loop2: detected capacity change from 0 to 2048 [ 371.378713][ T7133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 371.587424][ T7138] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 371.739928][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 374.042596][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 374.072567][ T7153] serio: Serial port pts0 [ 374.399235][ T7159] netlink: 652 bytes leftover after parsing attributes in process `syz.5.273'. [ 375.047555][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.070061][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.080517][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.125646][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.152877][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.779568][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 377.233734][ T7193] loop7: detected capacity change from 0 to 512 [ 377.253420][ T5817] Bluetooth: hci4: command tx timeout [ 377.404193][ T7193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 377.655074][ T7201] loop5: detected capacity change from 0 to 1024 [ 377.694457][ T7193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.707934][ T7193] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.786861][ T7196] loop2: detected capacity change from 0 to 1024 [ 377.788842][ T7201] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 377.805805][ T7201] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 377.912700][ T7196] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 377.924928][ T7196] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 377.978443][ T7193] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.285: corrupted xattr block 19: overlapping e_value [ 378.009074][ T7201] JBD2: no valid journal superblock found [ 378.015103][ T7201] EXT4-fs (loop5): Could not load journal inode [ 378.069526][ T7196] JBD2: no valid journal superblock found [ 378.075968][ T7196] EXT4-fs (loop2): Could not load journal inode [ 378.099578][ T7209] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.285: corrupted xattr block 19: overlapping e_value [ 379.018808][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.327003][ T5817] Bluetooth: hci4: command tx timeout [ 379.841795][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.858828][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.867294][ T7165] bridge_slave_0: entered allmulticast mode [ 379.979964][ T7165] bridge_slave_0: entered promiscuous mode [ 380.045613][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.061663][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.069802][ T7165] bridge_slave_1: entered allmulticast mode [ 380.079756][ T7165] bridge_slave_1: entered promiscuous mode [ 380.651411][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.779511][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.967966][ T7242] loop2: detected capacity change from 0 to 256 [ 381.043959][ T7241] loop0: detected capacity change from 0 to 1024 [ 381.150965][ T7241] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 381.162857][ T7241] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 381.225306][ T30] audit: type=1800 audit(1754508953.725:34): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.300" name="file1" dev="loop2" ino=1048614 res=0 errno=0 [ 381.233937][ T7242] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 381.255569][ T7242] FAT-fs (loop2): Filesystem has been set read-only [ 381.289975][ T7165] team0: Port device team_slave_0 added [ 381.341768][ T7241] JBD2: no valid journal superblock found [ 381.352676][ T7241] EXT4-fs (loop0): Could not load journal inode [ 381.361957][ T7165] team0: Port device team_slave_1 added [ 381.434100][ T5817] Bluetooth: hci4: command tx timeout [ 382.003305][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.011021][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.038739][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.351441][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.359694][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.386524][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.487031][ T5817] Bluetooth: hci4: command tx timeout [ 383.558251][ T7165] hsr_slave_0: entered promiscuous mode [ 383.569095][ T7165] hsr_slave_1: entered promiscuous mode [ 383.578112][ T7165] debugfs: 'hsr0' already exists in 'hsr' [ 383.584132][ T7165] Cannot create hsr debugfs directory [ 383.696712][ T7274] binder: 7273:7274 ioctl c0306201 0 returned -14 [ 384.019161][ T7278] loop7: detected capacity change from 0 to 512 [ 384.074450][ T7278] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.084011][ T7278] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 384.272452][ T7278] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 384.358127][ T7278] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 384.367325][ T7278] System zones: 0-2, 18-18, 34-35 [ 384.409387][ T7278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.814801][ T7278] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.312: bg 0: block 353: padding at end of block bitmap is not set [ 384.856535][ T7278] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 385.760651][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.812940][ T7165] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 385.941426][ T7296] loop5: detected capacity change from 0 to 2048 [ 385.990787][ T7165] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 386.123262][ T7165] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 386.139256][ T7296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 386.334723][ T7165] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 386.820732][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 387.152919][ T7316] binder: 7315:7316 ioctl c0306201 0 returned -14 [ 388.154587][ T7326] loop7: detected capacity change from 0 to 128 [ 388.220206][ T7326] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.306517][ T7326] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 388.368003][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.704094][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.870667][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.878357][ T4266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.066765][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.074317][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.112596][ T7337] loop0: detected capacity change from 0 to 1024 [ 389.605346][ T7337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 389.618512][ T7337] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.422351][ T3787] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:18: lblock 0 mapped to illegal pblock 0 (length 1) [ 390.507366][ T3787] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 390.520199][ T3787] EXT4-fs (loop0): This should not happen!! Data will be lost [ 390.520199][ T3787] [ 390.549037][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 390.792814][ T7357] binder: 7355:7357 ioctl c0306201 0 returned -14 [ 391.821343][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.048806][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 392.059490][ T7371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.340'. [ 392.089665][ T7369] netlink: 766 bytes leftover after parsing attributes in process `syz.5.341'. [ 392.916570][ T7378] program syz.5.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.445625][ T7165] veth0_vlan: entered promiscuous mode [ 395.552373][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 395.562033][ T7417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.355'. [ 395.635895][ T7165] veth1_vlan: entered promiscuous mode [ 396.091676][ T7165] veth0_macvtap: entered promiscuous mode [ 396.194906][ T7165] veth1_macvtap: entered promiscuous mode [ 396.412727][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.607090][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.696579][ T3691] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.727012][ T1143] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.800282][ T1143] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.859474][ T3691] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.864611][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.370'. [ 399.119381][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 399.129051][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 399.983606][ T7476] loop7: detected capacity change from 0 to 8192 [ 400.099083][ T7475] loop5: detected capacity change from 0 to 1024 [ 400.171580][ T7475] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 400.186575][ T7475] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 400.287573][ T7475] JBD2: no valid journal superblock found [ 400.293593][ T7475] EXT4-fs (loop5): Could not load journal inode [ 401.637039][ T7495] loop0: detected capacity change from 0 to 1024 [ 401.909168][ T7495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 401.922506][ T7495] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.295141][ T7503] loop5: detected capacity change from 0 to 512 [ 402.495403][ T7503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.697021][ T7503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.710694][ T7503] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.754687][ T4266] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u8:27: lblock 0 mapped to illegal pblock 0 (length 1) [ 402.863315][ T4266] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 402.876553][ T4266] EXT4-fs (loop0): This should not happen!! Data will be lost [ 402.876553][ T4266] [ 402.913149][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 402.923922][ T7503] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.382: corrupted xattr block 19: overlapping e_value [ 402.943488][ T7512] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.382: corrupted xattr block 19: overlapping e_value [ 403.469322][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.493761][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.386'. [ 403.510934][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.386'. [ 403.712528][ T7519] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.803005][ T7519] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.035520][ T7519] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.143549][ T7519] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.330054][ T3787] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.528795][ T4012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.614568][ T4012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.718163][ T4012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.435895][ T7538] loop7: detected capacity change from 0 to 1024 [ 405.673735][ T7538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 405.686965][ T7538] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.904521][ T7548] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.129581][ T7548] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.253338][ T7551] loop2: detected capacity change from 0 to 2048 [ 406.371133][ T7548] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.416639][ T7555] loop5: detected capacity change from 0 to 128 [ 406.473238][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 406.510022][ T7551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.584932][ T7548] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.609211][ T7555] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.663086][ T7555] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 406.787086][ T7555] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 407.199921][ T6581] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.223940][ T5816] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 407.308688][ T5816] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 407.530381][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.664971][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.673985][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.123819][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.133700][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.699245][ T1015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.701356][ T7571] loop2: detected capacity change from 0 to 512 [ 408.756552][ T1015] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.789971][ T7571] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 408.799384][ T7571] EXT4-fs (loop2): failed to open journal device unknown-block(8,3) -6 [ 408.843033][ T1015] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.920700][ T1015] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.149178][ T7580] mmap: syz.8.268 (7580) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 410.682499][ T7600] @: renamed from vlan0 (while UP) [ 411.688021][ T7599] loop8: detected capacity change from 0 to 8192 [ 412.196703][ T7615] loop2: detected capacity change from 0 to 512 [ 412.559720][ T7615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.573239][ T7615] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.253237][ T7628] loop7: detected capacity change from 0 to 1024 [ 413.377953][ T7628] EXT4-fs: Ignoring removed bh option [ 413.459393][ T7628] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 413.562994][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.680553][ T7628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.929616][ T7628] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.417: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 414.103998][ T7628] EXT4-fs (loop7): Remounting filesystem read-only [ 414.620607][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.234752][ T7658] 9pnet_fd: Insufficient options for proto=fd [ 416.003936][ T7668] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 416.033839][ T7668] dummy0: entered promiscuous mode [ 416.040371][ T7668] dummy0: entered allmulticast mode [ 416.049768][ T7668] team0: Port device dummy0 added [ 416.352794][ T7673] loop8: detected capacity change from 0 to 512 [ 416.487342][ T7673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.568451][ T7668] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 416.588792][ T7668] bridge0: port 3(team0) entered disabled state [ 416.735643][ T7673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.748370][ T7668] team0 (unregistering): left allmulticast mode [ 416.749398][ T7673] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.755220][ T7668] team_slave_0: left allmulticast mode [ 416.771780][ T7668] team_slave_1: left allmulticast mode [ 416.777878][ T7668] dummy0: left allmulticast mode [ 416.783063][ T7668] team0 (unregistering): left promiscuous mode [ 416.789802][ T7668] team_slave_0: left promiscuous mode [ 416.796761][ T7668] team_slave_1: left promiscuous mode [ 416.803475][ T7668] dummy0: left promiscuous mode [ 416.817279][ T7668] bridge0: port 3(team0) entered disabled state [ 416.851151][ T7668] team0 (unregistering): Port device team_slave_0 removed [ 416.908695][ T7673] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.432: corrupted xattr block 19: overlapping e_value [ 416.952196][ T7668] team0 (unregistering): Port device team_slave_1 removed [ 417.030283][ T7686] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.432: corrupted xattr block 19: overlapping e_value [ 417.061298][ T7668] team0 (unregistering): Port device dummy0 removed [ 417.480087][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.715640][ T7692] pim6reg: entered allmulticast mode [ 417.745098][ T7693] pim6reg: left allmulticast mode [ 418.230374][ T7696] netlink: 766 bytes leftover after parsing attributes in process `syz.5.439'. [ 418.532184][ T7703] 9pnet_fd: Insufficient options for proto=fd [ 419.331940][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.338882][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.557084][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.445'. [ 420.075750][ T7721] loop8: detected capacity change from 0 to 512 [ 420.158766][ T7721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.338071][ T7721] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.352153][ T7721] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.523408][ T7721] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.448: corrupted xattr block 19: overlapping e_value [ 421.132423][ T7738] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.201006][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.324205][ T7738] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.569396][ T7738] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.681498][ T7745] 9pnet_fd: Insufficient options for proto=fd [ 421.789061][ T7738] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.399102][ T4210] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.561559][ T7757] serio: Serial port pts0 [ 422.601908][ T7758] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.792661][ T3831] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.921281][ T7758] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.050611][ T3831] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.204047][ T7758] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.347089][ T3831] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.580650][ T7758] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.142712][ T3831] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.292950][ T3831] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.419501][ T4210] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.604003][ T4210] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.102617][ T30] audit: type=1800 audit(1754508997.615:35): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="/" dev="9p" ino=2 res=0 errno=0 [ 426.196107][ C1] hrtimer: interrupt took 287048 ns [ 427.307538][ T7808] netlink: 766 bytes leftover after parsing attributes in process `syz.2.476'. [ 427.648901][ T7812] serio: Serial port pts0 [ 428.245568][ T7825] loop2: detected capacity change from 0 to 512 [ 428.395562][ T7825] EXT4-fs: inline encryption not supported [ 428.402894][ T7825] EXT4-fs: Ignoring removed nobh option [ 428.741690][ T7825] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 428.754219][ T7825] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 428.764978][ T7825] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.481: Corrupt directory, running e2fsck is recommended [ 428.891418][ T7829] loop5: detected capacity change from 0 to 512 [ 428.945843][ T7825] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 428.954903][ T7825] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.481: corrupted in-inode xattr: invalid ea_ino [ 429.053668][ T7829] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 429.062576][ T7829] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 429.104047][ T7825] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.481: couldn't read orphan inode 15 (err -117) [ 429.185218][ T7825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.217819][ T7829] EXT4-fs (loop5): 1 truncate cleaned up [ 429.227512][ T7829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.347285][ T7825] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 429.359409][ T7825] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 429.370190][ T7825] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.481: Corrupt directory, running e2fsck is recommended [ 429.562202][ T7829] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 429.587275][ T7836] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 429.600291][ T7836] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 429.613211][ T7836] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.481: Corrupt directory, running e2fsck is recommended [ 429.819688][ T7838] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 429.832183][ T7838] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 429.842928][ T7838] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.481: Corrupt directory, running e2fsck is recommended [ 429.987030][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.468242][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.505775][ T7862] loop8: detected capacity change from 0 to 1024 [ 431.613898][ T7862] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 431.824752][ T7862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.989169][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.697463][ T5109] Bluetooth: hci0: command 0x0406 tx timeout [ 436.948909][ T7931] loop5: detected capacity change from 0 to 1024 [ 437.071088][ T7931] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 437.260678][ T7931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.520349][ T7948] loop8: detected capacity change from 0 to 512 [ 437.607939][ T7948] EXT4-fs: inline encryption not supported [ 437.614903][ T7948] EXT4-fs: Ignoring removed nobh option [ 437.915617][ T7948] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 437.928110][ T7948] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 437.940358][ T7948] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.521: Corrupt directory, running e2fsck is recommended [ 438.012620][ T7955] bridge0: entered allmulticast mode [ 438.036531][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.522'. [ 438.045950][ T7955] bridge_slave_1: left allmulticast mode [ 438.052112][ T7955] bridge_slave_1: left promiscuous mode [ 438.059548][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.140736][ T7948] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 438.149759][ T7948] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.521: corrupted in-inode xattr: invalid ea_ino [ 438.228391][ T7955] bridge_slave_0: left allmulticast mode [ 438.234472][ T7955] bridge_slave_0: left promiscuous mode [ 438.241815][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.252946][ T7948] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.521: couldn't read orphan inode 15 (err -117) [ 438.271515][ T7948] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.306337][ T7948] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 438.320109][ T7948] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 438.331790][ T7948] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.521: Corrupt directory, running e2fsck is recommended [ 438.402783][ T7955] bridge0 (unregistering): left allmulticast mode [ 438.523919][ T7960] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 438.536486][ T7960] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 438.548444][ T7960] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.521: Corrupt directory, running e2fsck is recommended [ 438.653480][ T7962] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 438.665764][ T7962] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 438.676458][ T7962] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.521: Corrupt directory, running e2fsck is recommended [ 438.756337][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 439.113148][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.369831][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.451636][ T7969] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.809607][ T7969] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.291728][ T7969] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.533144][ T7969] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.229178][ T3831] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.257429][ T4012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.266001][ T4012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.376341][ T4012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.810081][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 442.234101][ T8004] loop0: detected capacity change from 0 to 1024 [ 442.384463][ T8004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.600804][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.539'. [ 442.665747][ T8008] pim6reg: entered allmulticast mode [ 443.014823][ T8006] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 443.684776][ T8015] tipc: Started in network mode [ 443.690286][ T8015] tipc: Node identity 8a052d3f0905, cluster identity 4711 [ 443.698955][ T8015] tipc: Enabled bearer , priority 0 [ 443.761342][ T8017] syzkaller0: entered promiscuous mode [ 443.767238][ T8017] syzkaller0: entered allmulticast mode [ 444.067172][ T8015] tipc: Resetting bearer [ 444.147949][ T8014] tipc: Resetting bearer [ 444.328261][ T8014] tipc: Disabling bearer [ 445.197590][ T8026] loop7: detected capacity change from 0 to 1024 [ 445.598615][ T8026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 445.611642][ T8026] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.737539][ T8029] loop8: detected capacity change from 0 to 512 [ 445.911606][ T8029] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 446.094243][ T8034] loop5: detected capacity change from 0 to 128 [ 446.270614][ T8034] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.317658][ T8029] EXT4-fs (loop8): 1 truncate cleaned up [ 446.326532][ T8029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.446024][ T8034] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.728582][ T30] audit: type=1800 audit(1754509019.225:36): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.545" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 446.785433][ T8039] loop2: detected capacity change from 0 to 1024 [ 446.861325][ T8034] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.008241][ T8039] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 447.319308][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.380887][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.626924][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.867999][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.202684][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.8.549'. [ 450.545556][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.021829][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 451.031855][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 452.093508][ T8085] loop8: detected capacity change from 0 to 2048 [ 452.149753][ T8092] netlink: 'syz.5.561': attribute type 10 has an invalid length. [ 452.149855][ T8092] netlink: 40 bytes leftover after parsing attributes in process `syz.5.561'. [ 452.150131][ T8092] team0: entered promiscuous mode [ 452.150231][ T8092] team_slave_0: entered promiscuous mode [ 452.151510][ T8092] team_slave_1: entered promiscuous mode [ 452.152655][ T8092] team0: entered allmulticast mode [ 452.152753][ T8092] team_slave_0: entered allmulticast mode [ 452.152849][ T8092] team_slave_1: entered allmulticast mode [ 452.157867][ T8092] bridge0: port 3(team0) entered blocking state [ 452.158274][ T8092] bridge0: port 3(team0) entered disabled state [ 452.168271][ T8092] bridge0: port 3(team0) entered blocking state [ 452.168700][ T8092] bridge0: port 3(team0) entered forwarding state [ 452.212443][ T8094] capability: warning: `syz.5.561' uses deprecated v2 capabilities in a way that may be insecure [ 452.259712][ T8085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.314906][ T8091] loop0: detected capacity change from 0 to 1024 [ 452.366564][ T8091] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 452.852514][ T7165] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 452.931676][ T8091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.969298][ T7165] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 453.489162][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.519497][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.682503][ T8135] loop2: detected capacity change from 0 to 8192 [ 456.667924][ T8147] tipc: Started in network mode [ 456.673126][ T8147] tipc: Node identity 2e4e4229af4e, cluster identity 4711 [ 456.683240][ T8147] tipc: Enabled bearer , priority 0 [ 456.739445][ T8150] syzkaller0: entered promiscuous mode [ 456.748504][ T8150] syzkaller0: entered allmulticast mode [ 456.871951][ T8147] tipc: Resetting bearer [ 456.992568][ T8145] tipc: Resetting bearer [ 457.093824][ T8145] tipc: Disabling bearer [ 457.220136][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.7.574'. [ 457.250562][ T8148] loop2: detected capacity change from 0 to 2048 [ 457.631343][ T8148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.648456][ T8148] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.504141][ T8168] loop5: detected capacity change from 0 to 1024 [ 458.649158][ T8168] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 458.710395][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.816338][ T8168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.697712][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.090544][ T8186] loop0: detected capacity change from 0 to 512 [ 460.278982][ T8186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 460.547875][ T8186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.561382][ T8186] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.804291][ T8186] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.582: corrupted xattr block 19: overlapping e_value [ 460.934476][ T8199] program syz.8.586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.184278][ T8202] loop7: detected capacity change from 0 to 512 [ 461.256982][ T8204] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 461.293683][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.372909][ T8202] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 461.564791][ T8202] EXT4-fs (loop7): 1 truncate cleaned up [ 461.576535][ T8202] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.794602][ T30] audit: type=1800 audit(1754509034.305:37): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.587" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 462.321740][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.710199][ T8217] loop5: detected capacity change from 0 to 1024 [ 462.723538][ T8217] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 462.842511][ T8217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.719151][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.172635][ T8260] loop7: detected capacity change from 0 to 64 [ 465.604491][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.7.608'. [ 465.614221][ T8260] netlink: 28 bytes leftover after parsing attributes in process `syz.7.608'. [ 466.805046][ T8278] bridge0: entered allmulticast mode [ 466.866523][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.8.614'. [ 466.876002][ T8278] bridge_slave_1: left allmulticast mode [ 466.882173][ T8278] bridge_slave_1: left promiscuous mode [ 466.891976][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.105089][ T8278] bridge_slave_0: left allmulticast mode [ 467.111567][ T8278] bridge_slave_0: left promiscuous mode [ 467.118668][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.549122][ T8278] bridge0 (unregistering): left allmulticast mode [ 468.426543][ T5894] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 468.676842][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 468.708587][ T8304] raw_sendmsg: syz.7.623 forgot to set AF_INET. Fix it! [ 468.768018][ T5894] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 468.777884][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.786427][ T5894] usb 6-1: Product: syz [ 468.790839][ T5894] usb 6-1: Manufacturer: syz [ 468.795664][ T5894] usb 6-1: SerialNumber: syz [ 468.860889][ T8297] loop8: detected capacity change from 0 to 2048 [ 468.967824][ T5894] usb 6-1: config 0 descriptor?? [ 469.150816][ T8297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.335461][ T8292] 8021q: VLANs not supported on vcan0 [ 469.395641][ T8309] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 469.423356][ T5894] airspy 6-1:0.0: usb_control_msg() failed -71 request 09 [ 469.430958][ T5894] airspy 6-1:0.0: Could not detect board [ 469.437356][ T5894] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 469.618915][ T5894] usb 6-1: USB disconnect, device number 2 [ 470.314312][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.478326][ T8327] tipc: Enabled bearer , priority 0 [ 471.529510][ T8328] syzkaller0: entered promiscuous mode [ 471.535510][ T8328] syzkaller0: entered allmulticast mode [ 471.609572][ T8327] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 471.743492][ T8326] tipc: Resetting bearer [ 471.868829][ T8326] tipc: Disabling bearer [ 473.428572][ T8334] loop0: detected capacity change from 0 to 8192 [ 473.606902][ T30] audit: type=1800 audit(1754509046.105:38): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.631" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 473.628674][ T30] audit: type=1800 audit(1754509046.125:39): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.631" name="file1" dev="loop0" ino=1048624 res=0 errno=0 [ 475.368105][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 475.378182][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 475.687331][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.8.647'. [ 476.645974][ T8382] loop2: detected capacity change from 0 to 40427 [ 476.659727][ T8382] F2FS-fs (loop2): build fault injection rate: 14 [ 476.666631][ T8382] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 476.696665][ T8382] F2FS-fs (loop2): invalid crc value [ 476.781376][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80 [ 476.815370][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0xe27/0xf80 [ 477.185792][ T8382] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.195906][ T8382] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 477.258708][ T8382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 478.112174][ T8405] bridge0: entered allmulticast mode [ 478.849323][ T8414] program syz.2.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.100225][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'. [ 480.752084][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.759988][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.794365][ T8454] loop5: detected capacity change from 0 to 128 [ 481.972793][ T8454] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 482.011085][ T8454] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 482.028874][ T8454] EXT4-fs (loop5): shut down requested (2) [ 482.219487][ T8459] loop6: detected capacity change from 0 to 7 [ 482.275034][ T8459] Dev loop6: unable to read RDB block 7 [ 482.281512][ T8459] loop6: unable to read partition table [ 482.355122][ T8459] loop6: partition table beyond EOD, truncated [ 482.362022][ T8459] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 482.635294][ T8468] program syz.2.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.068602][ T8473] tipc: Enabled bearer , priority 0 [ 483.113719][ T8475] syzkaller0: entered promiscuous mode [ 483.119982][ T8475] syzkaller0: entered allmulticast mode [ 483.622389][ T8473] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 483.705664][ T3787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.760515][ T8469] tipc: Resetting bearer [ 483.905375][ T8469] tipc: Disabling bearer [ 485.650343][ T6581] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.001434][ T8510] program syz.5.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.031252][ T8506] loop7: detected capacity change from 0 to 1024 [ 487.168056][ T8506] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 487.402108][ T8506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.801763][ T8520] tipc: Enabled bearer , priority 0 [ 487.885362][ T8520] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 487.951777][ T8524] tipc: Resetting bearer [ 488.025022][ T8517] tipc: Disabling bearer [ 488.528647][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 488.542469][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 488.571948][ T8530] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 488.580400][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 488.661436][ T8529] erspan0: entered promiscuous mode [ 488.672992][ T8529] batadv_slave_1: entered promiscuous mode [ 490.504951][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.311985][ T8590] loop7: detected capacity change from 0 to 1024 [ 493.383079][ T8590] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 493.568937][ T8599] 8021q: VLANs not supported on caif0 [ 493.603590][ T8590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.298913][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.993837][ T8614] loop7: detected capacity change from 0 to 512 [ 495.317864][ T8614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.335027][ T8614] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.510978][ T8623] syzkaller0: entered promiscuous mode [ 495.516874][ T8623] syzkaller0: entered allmulticast mode [ 495.610457][ T8614] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 495.717479][ T8614] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 495.730435][ T8614] EXT4-fs (loop7): This should not happen!! Data will be lost [ 495.730435][ T8614] [ 495.740567][ T8614] EXT4-fs (loop7): Total free blocks count 0 [ 495.747008][ T8614] EXT4-fs (loop7): Free/Dirty block details [ 495.753116][ T8614] EXT4-fs (loop7): free_blocks=65280 [ 495.758802][ T8614] EXT4-fs (loop7): dirty_blocks=1 [ 495.769152][ T8614] EXT4-fs (loop7): Block reservation details [ 495.769449][ T8628] input: syz0 as /devices/virtual/input/input6 [ 495.775350][ T8614] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 496.096613][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 496.342329][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 496.419409][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.485981][ T5894] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 496.496025][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.504933][ T5894] usb 3-1: Product: syz [ 496.510376][ T5894] usb 3-1: Manufacturer: syz [ 496.515255][ T5894] usb 3-1: SerialNumber: syz [ 496.663976][ T5894] usb 3-1: config 0 descriptor?? [ 497.097145][ T8630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.717'. [ 497.207815][ T5894] airspy 3-1:0.0: usb_control_msg() failed -71 request 09 [ 497.215451][ T5894] airspy 3-1:0.0: Could not detect board [ 497.221942][ T5894] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 497.338593][ T5894] usb 3-1: USB disconnect, device number 2 [ 497.541317][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 497.827156][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 497.934463][ T9] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 497.944974][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.953486][ T9] usb 9-1: Product: syz [ 497.957981][ T9] usb 9-1: Manufacturer: syz [ 497.962867][ T9] usb 9-1: SerialNumber: syz [ 498.132116][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 498.305676][ T9] usb 9-1: config 0 descriptor?? [ 498.341473][ T8646] loop7: detected capacity change from 0 to 1024 [ 498.408899][ T8646] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 498.604190][ T8646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.619239][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.8.719'. [ 498.665175][ T8636] vlan2: entered promiscuous mode [ 498.670810][ T8636] bond0: entered promiscuous mode [ 498.676394][ T8636] bond_slave_0: entered promiscuous mode [ 498.684258][ T8636] bond_slave_1: entered promiscuous mode [ 498.716568][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 498.784103][ T8655] loop2: detected capacity change from 0 to 512 [ 498.967499][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 499.044921][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 499.053724][ T24] usb 6-1: config 0 has no interface number 0 [ 499.151503][ T8655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.165097][ T8655] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.189999][ T9] airspy 9-1:0.0: usb_control_msg() failed -71 request 09 [ 499.198246][ T9] airspy 9-1:0.0: Could not detect board [ 499.204712][ T9] airspy 9-1:0.0: probe with driver airspy failed with error -71 [ 499.326643][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 499.336571][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.347892][ T24] usb 6-1: Product: syz [ 499.352296][ T24] usb 6-1: Manufacturer: syz [ 499.358307][ T24] usb 6-1: SerialNumber: syz [ 499.437013][ T9] usb 9-1: USB disconnect, device number 2 [ 499.518667][ T6576] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.542273][ T24] usb 6-1: config 0 descriptor?? [ 499.574481][ T8655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 499.611759][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 499.639443][ T8655] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 499.655394][ T8655] EXT4-fs (loop2): This should not happen!! Data will be lost [ 499.655394][ T8655] [ 499.667226][ T8655] EXT4-fs (loop2): Total free blocks count 0 [ 499.673442][ T8655] EXT4-fs (loop2): Free/Dirty block details [ 499.680150][ T8655] EXT4-fs (loop2): free_blocks=65280 [ 499.685793][ T8655] EXT4-fs (loop2): dirty_blocks=1 [ 499.691437][ T8655] EXT4-fs (loop2): Block reservation details [ 499.698018][ T8655] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 499.883875][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 499.963411][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 500.380274][ T8650] netlink: 112 bytes leftover after parsing attributes in process `syz.5.724'. [ 500.394645][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 500.417194][ T24] usb 6-1: USB disconnect, device number 3 [ 500.503867][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 500.699292][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 500.699370][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.723836][ T24] quatech2 6-1:0.51: device disconnected [ 503.547672][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 503.638057][ T8704] loop5: detected capacity change from 0 to 1024 [ 503.766765][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 503.778536][ T8704] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 503.853171][ T24] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 503.862795][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.871328][ T24] usb 9-1: Product: syz [ 503.875731][ T24] usb 9-1: Manufacturer: syz [ 503.880879][ T24] usb 9-1: SerialNumber: syz [ 504.059928][ T8704] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.139999][ T24] usb 9-1: config 0 descriptor?? [ 504.538884][ T8702] netlink: 28 bytes leftover after parsing attributes in process `syz.8.737'. [ 504.697999][ T24] airspy 9-1:0.0: usb_control_msg() failed -71 request 09 [ 504.705413][ T24] airspy 9-1:0.0: Could not detect board [ 504.712120][ T24] airspy 9-1:0.0: probe with driver airspy failed with error -71 [ 504.906843][ T24] usb 9-1: USB disconnect, device number 3 [ 504.931595][ T8710] loop0: detected capacity change from 0 to 4096 [ 505.109328][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.272817][ T8723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.382215][ T30] audit: type=1800 audit(1754509077.885:40): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.741" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 506.055377][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 506.170953][ T8726] ref_ctr increment failed for inode: 0x3ed offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88804dcf7800 [ 506.277845][ T8734] syzkaller0: entered promiscuous mode [ 506.283580][ T8734] syzkaller0: entered allmulticast mode [ 506.397132][ T8734] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 508.614260][ T8760] loop5: detected capacity change from 0 to 1024 [ 508.737907][ T8760] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 509.085684][ T8760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.089065][ T8770] binfmt_misc: register: failed to install interpreter file ./file0 [ 509.640873][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 509.927980][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 509.938414][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.947313][ T9] usb 3-1: Product: syz [ 509.951724][ T9] usb 3-1: Manufacturer: syz [ 509.956762][ T9] usb 3-1: SerialNumber: syz [ 509.989362][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.184632][ T9] usb 3-1: config 0 descriptor?? [ 510.195104][ T8784] syzkaller0: entered promiscuous mode [ 510.207669][ T8784] syzkaller0: entered allmulticast mode [ 510.295555][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 510.308205][ T8785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 510.736890][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.7.762'. [ 511.054896][ T8774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.065873][ T8774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.366310][ T9] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 511.373014][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 512.837093][ T24] usb 3-1: USB disconnect, device number 3 [ 513.390260][ T8817] loop2: detected capacity change from 0 to 1024 [ 513.434230][ T8817] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 513.634237][ T8817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.920813][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.207617][ T5109] Bluetooth: hci4: command 0x0406 tx timeout [ 525.174098][ T8871] loop8: detected capacity change from 0 to 1024 [ 525.270311][ T8871] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 525.402656][ T8871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.588784][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 525.601439][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 525.615304][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 525.687120][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 525.702817][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 526.024220][ T8888] loop2: detected capacity change from 0 to 16 [ 526.143725][ T8888] erofs (device loop2): mounted with root inode @ nid 36. [ 526.208202][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.807317][ T5817] Bluetooth: hci0: command tx timeout [ 528.027161][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 528.255658][ T8892] loop5: detected capacity change from 0 to 65536 [ 528.423421][ T8892] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 528.769672][ T8892] XFS (loop5): Ending clean mount [ 529.897485][ T5817] Bluetooth: hci0: command tx timeout [ 531.994762][ T5817] Bluetooth: hci0: command tx timeout [ 532.171473][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.179424][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.187633][ T8878] bridge_slave_0: entered allmulticast mode [ 532.197768][ T8878] bridge_slave_0: entered promiscuous mode [ 532.219348][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.227869][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.235753][ T8878] bridge_slave_1: entered allmulticast mode [ 532.246426][ T8878] bridge_slave_1: entered promiscuous mode [ 532.278220][ T6581] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 532.616673][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.789032][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.991398][ T8929] loop8: detected capacity change from 0 to 256 [ 533.453844][ T8878] team0: Port device team_slave_0 added [ 533.565300][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 533.595887][ T8878] team0: Port device team_slave_1 added [ 533.612476][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 533.690348][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 533.741236][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 533.820773][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 533.954174][ T8936] loop5: detected capacity change from 0 to 1024 [ 533.971687][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.980326][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.006963][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.046479][ T5109] Bluetooth: hci0: command tx timeout [ 534.167805][ T8936] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 534.419493][ T8936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.667110][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.677385][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.705750][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.305483][ T6581] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.478816][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.8.799'. [ 535.611366][ T8878] hsr_slave_0: entered promiscuous mode [ 535.622160][ T8878] hsr_slave_1: entered promiscuous mode [ 535.631426][ T8878] debugfs: 'hsr0' already exists in 'hsr' [ 535.637551][ T8878] Cannot create hsr debugfs directory [ 535.967360][ T5109] Bluetooth: hci5: command tx timeout [ 536.912400][ T8933] chnl_net:caif_netlink_parms(): no params data found [ 538.050082][ T5109] Bluetooth: hci5: command tx timeout [ 538.921238][ T8878] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 539.098573][ T8878] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 539.183347][ T8878] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 539.331658][ T8878] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 539.398156][ T8975] loop8: detected capacity change from 0 to 1024 [ 539.540945][ T8975] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 539.829288][ T8975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.137532][ T5109] Bluetooth: hci5: command tx timeout [ 540.238772][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.246572][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.254420][ T8933] bridge_slave_0: entered allmulticast mode [ 540.264564][ T8933] bridge_slave_0: entered promiscuous mode [ 540.459091][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.466945][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.475037][ T8933] bridge_slave_1: entered allmulticast mode [ 540.486973][ T8933] bridge_slave_1: entered promiscuous mode [ 540.596839][ T7165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.244926][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.311587][ T1015] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.529031][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.660477][ T1015] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.996305][ T9002] loop5: detected capacity change from 0 to 128 [ 542.096980][ T9002] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 542.186274][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.193753][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.218268][ T5109] Bluetooth: hci5: command tx timeout [ 542.233485][ T9002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.291797][ T8933] team0: Port device team_slave_0 added [ 542.311565][ T8933] team0: Port device team_slave_1 added [ 542.482084][ T1015] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.543933][ T9002] overlay: ./file1 is not a directory [ 542.837465][ T1015] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.935280][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.943047][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.974660][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.211940][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.244133][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.252112][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.283513][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.917193][ T1015] bridge_slave_1: left allmulticast mode [ 543.923093][ T1015] bridge_slave_1: left promiscuous mode [ 543.931445][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.986985][ T1015] bridge_slave_0: left allmulticast mode [ 543.997235][ T1015] bridge_slave_0: left promiscuous mode [ 544.004045][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.552742][ T1015] erspan0 (unregistering): left promiscuous mode [ 544.632986][ T1015] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 544.716860][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.778675][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.804487][ T1015] bond0 (unregistering): Released all slaves [ 544.838326][ T1015] bond1 (unregistering): Released all slaves [ 545.307900][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.350782][ T8933] hsr_slave_0: entered promiscuous mode [ 545.367465][ T8933] hsr_slave_1: entered promiscuous mode [ 545.376846][ T8933] debugfs: 'hsr0' already exists in 'hsr' [ 545.382779][ T8933] Cannot create hsr debugfs directory [ 545.390268][ T1015] tipc: Left network mode [ 545.455991][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.463734][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.775110][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.782792][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.361168][ T1015] batadv_slave_1: left promiscuous mode [ 546.402037][ T9012] loop5: detected capacity change from 0 to 16 [ 546.451884][ T9012] erofs (device loop5): mounted with root inode @ nid 36. [ 546.577062][ T1015] hsr_slave_0: left promiscuous mode [ 546.594426][ T1015] hsr_slave_1: left promiscuous mode [ 546.602803][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.610727][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.677590][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.685649][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.726378][ T1015] veth1_macvtap: left promiscuous mode [ 546.732244][ T1015] veth0_macvtap: left promiscuous mode [ 546.738533][ T1015] veth1_vlan: left promiscuous mode [ 546.744135][ T1015] veth0_vlan: left promiscuous mode [ 547.441546][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.452064][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.483991][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.505190][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.518176][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 549.868586][ T5817] Bluetooth: hci2: command tx timeout [ 550.701153][ T9033] loop5: detected capacity change from 0 to 40427 [ 550.744163][ T9033] F2FS-fs (loop5): invalid crc value [ 551.130689][ T9033] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 551.143345][ T9033] F2FS-fs (loop5): Start checkpoint disabled! [ 551.173176][ T9033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 551.504101][ T9033] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 551.632565][ T1871] kworker/u8:8: attempt to access beyond end of device [ 551.632565][ T1871] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 551.648394][ T1871] CPU: 1 UID: 0 PID: 1871 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 551.648560][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.648707][ T1871] Workqueue: writeback wb_workfn (flush-7:5) [ 551.648987][ T1871] Call Trace: [ 551.649048][ T1871] [ 551.649100][ T1871] __dump_stack+0x26/0x30 [ 551.649286][ T1871] dump_stack_lvl+0x1df/0x270 [ 551.649482][ T1871] dump_stack+0x1e/0x25 [ 551.649662][ T1871] f2fs_handle_critical_error+0xa6f/0xc20 [ 551.649898][ T1871] f2fs_stop_checkpoint+0x65/0x80 [ 551.650096][ T1871] f2fs_write_end_io+0x101c/0x1bc0 [ 551.650340][ T1871] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 551.650538][ T1871] bio_endio+0xe27/0xf80 [ 551.650752][ T1871] submit_bio_noacct+0x214/0x2710 [ 551.651023][ T1871] submit_bio+0x5a9/0x5d0 [ 551.651249][ T1871] f2fs_submit_write_bio+0x92/0x250 [ 551.651438][ T1871] __submit_merged_bio+0x16f/0x6a0 [ 551.651616][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.651826][ T1871] __submit_merged_write_cond+0x458/0x9a0 [ 551.652038][ T1871] f2fs_write_data_pages+0x4bb2/0x5480 [ 551.652365][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.652627][ T1871] ? trace_pid_list_is_set+0x1a0/0x1f0 [ 551.652870][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.653050][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.653240][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.653409][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.653613][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.653803][ T1871] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 551.654063][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.654241][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.654435][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.654611][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.654812][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.654992][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.655176][ T1871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.655378][ T1871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.655574][ T1871] do_writepages+0x3f2/0x860 [ 551.655739][ T1871] ? stack_depot_save_flags+0x35/0x7b0 [ 551.655935][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.656105][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.656293][ T1871] __writeback_single_inode+0x101/0x1190 [ 551.656466][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.656649][ T1871] writeback_sb_inodes+0xac1/0x1cb0 [ 551.656967][ T1871] wb_writeback+0x4ce/0xc00 [ 551.657155][ T1871] ? queue_io+0x441/0x790 [ 551.657311][ T1871] wb_workfn+0x397/0x1910 [ 551.657525][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.657733][ T1871] ? __pfx_wb_workfn+0x10/0x10 [ 551.657936][ T1871] process_scheduled_works+0xb91/0x1d80 [ 551.658211][ T1871] worker_thread+0xedf/0x1590 [ 551.658460][ T1871] kthread+0xd59/0xf00 [ 551.658601][ T1871] ? __pfx_worker_thread+0x10/0x10 [ 551.658841][ T1871] ? __pfx_kthread+0x10/0x10 [ 551.659001][ T1871] ret_from_fork+0x1e3/0x310 [ 551.659157][ T1871] ? __pfx_kthread+0x10/0x10 [ 551.659310][ T1871] ret_from_fork_asm+0x1a/0x30 [ 551.659550][ T1871] [ 551.969640][ T1871] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 551.971331][ T5817] Bluetooth: hci2: command tx timeout [ 551.981203][ T1871] CPU: 1 UID: 0 PID: 1871 Comm: kworker/u8:8 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 551.981371][ T1871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.981508][ T1871] Workqueue: writeback wb_workfn (flush-7:5) [ 551.981775][ T1871] Call Trace: [ 551.981846][ T1871] [ 551.981914][ T1871] __dump_stack+0x26/0x30 [ 551.982126][ T1871] dump_stack_lvl+0x1df/0x270 [ 551.982355][ T1871] dump_stack+0x1e/0x25 [ 551.982555][ T1871] f2fs_handle_critical_error+0xa6f/0xc20 [ 551.982820][ T1871] f2fs_stop_checkpoint+0x65/0x80 [ 551.983049][ T1871] f2fs_write_end_io+0x101c/0x1bc0 [ 551.983324][ T1871] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 551.983546][ T1871] bio_endio+0xe27/0xf80 [ 551.983784][ T1871] submit_bio_noacct+0x214/0x2710 [ 551.984091][ T1871] submit_bio+0x5a9/0x5d0 [ 551.984344][ T1871] f2fs_submit_write_bio+0x92/0x250 [ 551.984551][ T1871] __submit_merged_bio+0x16f/0x6a0 [ 551.984748][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.984980][ T1871] __submit_merged_write_cond+0x458/0x9a0 [ 551.985217][ T1871] f2fs_write_data_pages+0x4bb2/0x5480 [ 551.985592][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.985799][ T1871] ? trace_pid_list_is_set+0x1a0/0x1f0 [ 551.986044][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.986242][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.986449][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.986635][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.986844][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.987023][ T1871] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 551.987256][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.987431][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.987611][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.987792][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.987984][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.988154][ T1871] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.988335][ T1871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.988544][ T1871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 551.988761][ T1871] do_writepages+0x3f2/0x860 [ 551.988947][ T1871] ? stack_depot_save_flags+0x35/0x7b0 [ 551.989159][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.989358][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.989584][ T1871] __writeback_single_inode+0x101/0x1190 [ 551.989792][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.990017][ T1871] writeback_sb_inodes+0xac1/0x1cb0 [ 551.990380][ T1871] wb_writeback+0x4ce/0xc00 [ 551.990583][ T1871] ? queue_io+0x441/0x790 [ 551.990772][ T1871] wb_workfn+0x397/0x1910 [ 551.991013][ T1871] ? kmsan_get_metadata+0xfb/0x160 [ 551.991236][ T1871] ? __pfx_wb_workfn+0x10/0x10 [ 551.991465][ T1871] process_scheduled_works+0xb91/0x1d80 [ 551.991778][ T1871] worker_thread+0xedf/0x1590 [ 551.992065][ T1871] kthread+0xd59/0xf00 [ 551.992229][ T1871] ? __pfx_worker_thread+0x10/0x10 [ 551.992494][ T1871] ? __pfx_kthread+0x10/0x10 [ 551.992675][ T1871] ret_from_fork+0x1e3/0x310 [ 551.992861][ T1871] ? __pfx_kthread+0x10/0x10 [ 551.993040][ T1871] ret_from_fork_asm+0x1a/0x30 [ 551.993301][ T1871] [ 551.994577][ T1871] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 553.147586][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.780657][ T8933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 553.876225][ T9014] chnl_net:caif_netlink_parms(): no params data found [ 553.947119][ T8933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.052971][ T5817] Bluetooth: hci2: command tx timeout [ 554.064713][ T8933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.095313][ T8933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.339853][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.611863][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.756174][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.763768][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.917680][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.925216][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.128960][ T5817] Bluetooth: hci2: command tx timeout [ 556.697563][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.705156][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.713308][ T9014] bridge_slave_0: entered allmulticast mode [ 556.723301][ T9014] bridge_slave_0: entered promiscuous mode [ 556.951001][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.959017][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.967022][ T9014] bridge_slave_1: entered allmulticast mode [ 556.977360][ T9014] bridge_slave_1: entered promiscuous mode [ 557.618245][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.642011][ T8878] veth0_vlan: entered promiscuous mode [ 557.789947][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.851533][ T8878] veth1_vlan: entered promiscuous mode [ 558.342453][ T9014] team0: Port device team_slave_0 added [ 558.448803][ T9014] team0: Port device team_slave_1 added [ 558.773981][ T8878] veth0_macvtap: entered promiscuous mode [ 558.977393][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.984555][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.011428][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.065084][ T8878] veth1_macvtap: entered promiscuous mode [ 559.223582][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.231118][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.261661][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.447200][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.522588][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.648803][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.358910][ T1015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.501554][ T9014] hsr_slave_0: entered promiscuous mode [ 564.514365][ T9014] hsr_slave_1: entered promiscuous mode [ 564.523873][ T9014] debugfs: 'hsr0' already exists in 'hsr' [ 564.530277][ T9014] Cannot create hsr debugfs directory [ 564.659365][ T1015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.823153][ T1015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.048241][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.814150][ T8933] veth0_vlan: entered promiscuous mode [ 566.501940][ T9096] loop8: detected capacity change from 0 to 40427 [ 566.681389][ T9096] F2FS-fs (loop8): invalid crc value [ 566.985095][ T9096] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 566.995856][ T9096] F2FS-fs (loop8): Start checkpoint disabled! [ 567.008701][ T9096] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 567.029707][ T8933] veth1_vlan: entered promiscuous mode [ 567.588369][ T1015] kworker/u8:6: attempt to access beyond end of device [ 567.588369][ T1015] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 567.602840][ T1015] CPU: 0 UID: 0 PID: 1015 Comm: kworker/u8:6 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 567.602998][ T1015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.603130][ T1015] Workqueue: writeback wb_workfn (flush-7:8) [ 567.603357][ T1015] Call Trace: [ 567.603408][ T1015] [ 567.603461][ T1015] __dump_stack+0x26/0x30 [ 567.603651][ T1015] dump_stack_lvl+0x1df/0x270 [ 567.603872][ T1015] dump_stack+0x1e/0x25 [ 567.604064][ T1015] f2fs_handle_critical_error+0xa6f/0xc20 [ 567.604303][ T1015] f2fs_stop_checkpoint+0x65/0x80 [ 567.604505][ T1015] f2fs_write_end_io+0x101c/0x1bc0 [ 567.604749][ T1015] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 567.604955][ T1015] bio_endio+0xe27/0xf80 [ 567.605168][ T1015] submit_bio_noacct+0x214/0x2710 [ 567.605437][ T1015] submit_bio+0x5a9/0x5d0 [ 567.605662][ T1015] f2fs_submit_write_bio+0x92/0x250 [ 567.605904][ T1015] __submit_merged_bio+0x16f/0x6a0 [ 567.606079][ T1015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 567.606274][ T1015] __submit_merged_write_cond+0x458/0x9a0 [ 567.606486][ T1015] f2fs_write_data_pages+0x4bb2/0x5480 [ 567.606768][ T1015] ? __enqueue_entity+0xbc1/0xcd0 [ 567.606980][ T1015] ? trace_pid_list_is_set+0x1a0/0x1f0 [ 567.607184][ T1015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 567.607373][ T1015] ? __pick_eevdf+0x41d/0x1240 [ 567.607572][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.607749][ T1015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 567.607941][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.608113][ T1015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 567.608293][ T1015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.608493][ T1015] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 567.608682][ T1015] do_writepages+0x3f2/0x860 [ 567.608847][ T1015] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 567.609036][ T1015] ? queue_io+0x741/0x790 [ 567.609173][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.609374][ T1015] __writeback_single_inode+0x101/0x1190 [ 567.609555][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.609744][ T1015] writeback_sb_inodes+0xac1/0x1cb0 [ 567.610010][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.610240][ T1015] wb_writeback+0x4ce/0xc00 [ 567.610439][ T1015] ? queue_io+0x441/0x790 [ 567.610609][ T1015] wb_workfn+0x397/0x1910 [ 567.610823][ T1015] ? kmsan_get_metadata+0xfb/0x160 [ 567.611024][ T1015] ? __pfx_wb_workfn+0x10/0x10 [ 567.611225][ T1015] process_scheduled_works+0xb91/0x1d80 [ 567.611497][ T1015] worker_thread+0xedf/0x1590 [ 567.611765][ T1015] kthread+0xd59/0xf00 [ 567.611926][ T1015] ? __pfx_worker_thread+0x10/0x10 [ 567.612160][ T1015] ? __pfx_kthread+0x10/0x10 [ 567.612324][ T1015] ret_from_fork+0x1e3/0x310 [ 567.612478][ T1015] ? __pfx_kthread+0x10/0x10 [ 567.612654][ T1015] ret_from_fork_asm+0x1a/0x30 [ 567.612897][ T1015] [ 567.902107][ T1015] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 568.777768][ T8933] veth0_macvtap: entered promiscuous mode [ 568.944676][ T8933] veth1_macvtap: entered promiscuous mode [ 569.925512][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.309913][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.823109][ T9014] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.898408][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.009791][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.020622][ T9014] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 571.116982][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.157974][ T9014] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 571.253063][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.320119][ T9014] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.195626][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.475498][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.598787][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.606610][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.807317][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.814886][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.496492][ T30] audit: type=1326 audit(1754509149.005:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.611115][ T30] audit: type=1326 audit(1754509149.045:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.634628][ T30] audit: type=1326 audit(1754509149.045:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.661886][ T30] audit: type=1326 audit(1754509149.045:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.686447][ T30] audit: type=1326 audit(1754509149.045:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.711125][ T30] audit: type=1326 audit(1754509149.055:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.733972][ T30] audit: type=1326 audit(1754509149.055:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.756813][ T30] audit: type=1326 audit(1754509149.055:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.8.849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55fb8ebe9 code=0x7ffc0000 [ 576.908647][ T9014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.518955][ T9014] veth0_vlan: entered promiscuous mode [ 577.654609][ T9014] veth1_vlan: entered promiscuous mode [ 578.271355][ T9014] veth0_macvtap: entered promiscuous mode [ 578.324681][ T9186] Bluetooth: MGMT ver 1.23 [ 578.327679][ T9014] veth1_macvtap: entered promiscuous mode [ 578.431998][ T8919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.441964][ T8919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.621949][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.773749][ T9014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.798004][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.811631][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.928994][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.973489][ T1015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.057963][ T1015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.101395][ T1015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.439027][ T9199] loop9: detected capacity change from 0 to 32768 [ 580.464118][ T9198] loop8: detected capacity change from 0 to 128 [ 580.474178][ T9199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.781 (9199) [ 580.538226][ T9199] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 580.553694][ T9199] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 580.563823][ T9199] BTRFS info (device loop9): using free-space-tree [ 580.572423][ T9198] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 580.622538][ T9198] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 580.977649][ T9198] overlay: ./file1 is not a directory [ 582.349411][ T9228] loop5: detected capacity change from 0 to 128 [ 582.482456][ T9228] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 582.973137][ T9228] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.362100][ T9228] overlay: ./file1 is not a directory [ 583.720197][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.736608][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.393239][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.401555][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.615744][ T8878] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 587.208467][ T9247] loop1: detected capacity change from 0 to 65536 [ 587.403073][ T9247] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 587.682586][ T9247] XFS (loop1): Ending clean mount [ 588.563730][ T9269] loop5: detected capacity change from 0 to 128 [ 588.565257][ T9247] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x1b9/0x300, xfs_agf block 0x1 [ 588.582203][ T9247] XFS (loop1): Unmount and run xfs_repair [ 588.588757][ T9247] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 588.596588][ T9247] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 588.605688][ T9247] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 588.615150][ T9247] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 588.624542][ T9247] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 588.633955][ T9247] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 588.648424][ T9247] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 588.659298][ T9247] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 588.668604][ T9247] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 588.677989][ T9247] XFS (loop1): metadata I/O error in "xfs_read_agf+0x23d/0x550" at daddr 0x1 len 1 error 74 [ 588.721270][ T9247] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x740/0xe70 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 588.738152][ T9247] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 589.237749][ T8933] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 589.895413][ T9285] loop9: detected capacity change from 0 to 16 [ 590.044333][ T9285] erofs (device loop9): mounted with root inode @ nid 36. [ 592.246338][ T30] audit: type=1326 audit(1754509164.715:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.456908][ T30] audit: type=1326 audit(1754509164.795:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.479910][ T30] audit: type=1326 audit(1754509164.805:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.502689][ T30] audit: type=1326 audit(1754509164.805:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.525884][ T30] audit: type=1326 audit(1754509164.835:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.555140][ T30] audit: type=1326 audit(1754509164.835:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.580066][ T30] audit: type=1326 audit(1754509164.835:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.603136][ T30] audit: type=1326 audit(1754509164.835:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.626257][ T30] audit: type=1326 audit(1754509164.835:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 592.655452][ T30] audit: type=1326 audit(1754509164.835:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9305 comm="syz.5.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a998ebe9 code=0x7ffc0000 [ 594.664483][ T9330] loop5: detected capacity change from 0 to 128 [ 594.991361][ T3831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.999935][ T3831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.526407][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.534624][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.192519][ T9346] loop1: detected capacity change from 0 to 40427 [ 597.366636][ T9346] F2FS-fs (loop1): invalid crc value [ 597.601972][ T30] audit: type=1326 audit(1754509170.085:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.625820][ T30] audit: type=1326 audit(1754509170.115:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.655184][ T30] audit: type=1326 audit(1754509170.115:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.781782][ T9346] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 597.795888][ T9346] F2FS-fs (loop1): Start checkpoint disabled! [ 597.866952][ T30] audit: type=1326 audit(1754509170.215:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.890487][ T30] audit: type=1326 audit(1754509170.285:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.926314][ T30] audit: type=1326 audit(1754509170.285:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.949794][ T30] audit: type=1326 audit(1754509170.285:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 597.979022][ T30] audit: type=1326 audit(1754509170.315:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 598.003904][ T30] audit: type=1326 audit(1754509170.315:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 598.026887][ T30] audit: type=1326 audit(1754509170.315:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.9.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9b678ebe9 code=0x7ffc0000 [ 598.053354][ T9346] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 603.624065][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.630924][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.765968][ T9398] loop2: detected capacity change from 0 to 7 [ 604.873472][ T9398] Dev loop2: unable to read RDB block 7 [ 604.880560][ T9398] loop2: unable to read partition table [ 604.969979][ T9398] loop2: partition table beyond EOD, truncated [ 604.977079][ T9398] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 605.305087][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 606.591730][ T9406] loop5: detected capacity change from 0 to 40427 [ 606.889907][ T9406] F2FS-fs (loop5): invalid crc value [ 607.096316][ T9413] loop3: detected capacity change from 0 to 32768 [ 607.228170][ T9406] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 607.239006][ T9406] F2FS-fs (loop5): Start checkpoint disabled! [ 607.267910][ T9406] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 607.783314][ T9413] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 607.783483][ T9413] allowing incompatible features above 0.0: (unknown version) [ 607.783579][ T9413] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 607.834318][ T9413] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 607.844060][ T9413] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 607.854267][ T9413] bcachefs (loop3): Version upgrade required: [ 607.854267][ T9413] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 607.854267][ T9413] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 607.854267][ T9413] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 607.997938][ T9413] bcachefs (loop3): dropping and reconstructing all alloc info [ 608.043435][ T9413] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error) [ 608.043566][ T9413] invalid variable length fields, deleting [ 608.133303][ T9413] bcachefs (loop3): accounting_read... done [ 608.162463][ T9413] bcachefs (loop3): alloc_read... done [ 608.208283][ T9413] bcachefs (loop3): snapshots_read... done [ 608.221720][ T9413] bcachefs (loop3): check_allocations... done [ 608.600305][ T9413] bcachefs (loop3): going read-write [ 608.895558][ T9413] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 608.997209][ T9413] bcachefs (loop3): done starting filesystem [ 609.176908][ T9014] bcachefs (loop3): shutting down [ 609.182450][ T9014] bcachefs (loop3): going read-only [ 609.188340][ T9014] bcachefs (loop3): finished waiting for writes to stop [ 609.335288][ T1015] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 609.335434][ T1015] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 609.371498][ T9428] loop1: detected capacity change from 0 to 32768 [ 609.448063][ T9014] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 609.469830][ T1015] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 609.469923][ T1015] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 609.510828][ T1015] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 609.510929][ T1015] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 609.616758][ T1015] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 609.616857][ T1015] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 609.793138][ T9428] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 609.793310][ T9428] allowing incompatible features above 0.0: (unknown version) [ 609.793411][ T9428] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 609.845892][ T9428] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 609.855296][ T9428] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 609.865344][ T9428] bcachefs (loop1): Version upgrade required: [ 609.865344][ T9428] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 609.865344][ T9428] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 609.865344][ T9428] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 609.970483][ T9428] bcachefs (loop1): dropping and reconstructing all alloc info [ 610.005244][ T36] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 610.005330][ T36] u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing [ 610.026167][ T9428] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error) [ 610.026292][ T9428] invalid variable length fields, deleting [ 610.133920][ T9428] bcachefs (loop1): accounting_read... done [ 610.172646][ T9428] bcachefs (loop1): alloc_read... done [ 610.187470][ T9428] bcachefs (loop1): snapshots_read... done [ 610.200604][ T9428] bcachefs (loop1): check_allocations... [ 610.212781][ T9014] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 610.262876][ T9014] bcachefs (loop3): unclean shutdown complete, journal seq 13 [ 610.333844][ T9014] bcachefs (loop3): done going read-only, filesystem not clean [ 610.544420][ T9014] bcachefs (loop3): shutdown complete [ 610.630510][ T9428] done [ 610.727635][ T9428] bcachefs (loop1): going read-write [ 611.100516][ T9428] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 611.284824][ T9428] bcachefs (loop1): done starting filesystem [ 611.288421][ T9105] udevd[9105]: incorrect bcachefs checksum on /dev/loop3 [ 611.382269][ T8933] bcachefs (loop1): shutting down [ 611.387665][ T8933] bcachefs (loop1): going read-only [ 611.393091][ T8933] bcachefs (loop1): finished waiting for writes to stop [ 611.454163][ T1143] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 611.454263][ T1143] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 611.553322][ T8933] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 611.823113][ T1143] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 611.823223][ T1143] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 611.876741][ T1143] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 611.876842][ T1143] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 612.033821][ T1143] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 612.033919][ T1143] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 612.320676][ T9437] udevd[9437]: incorrect bcachefs checksum on /dev/loop3 [ 612.331882][ T9093] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 612.331980][ T9093] u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing [ 612.472121][ T8933] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 612.626938][ T8933] bcachefs (loop1): unclean shutdown complete, journal seq 13 [ 612.710428][ T8933] bcachefs (loop1): done going read-only, filesystem not clean [ 612.867767][ T8933] bcachefs (loop1): shutdown complete [ 613.044987][ T9437] udevd[9437]: incorrect bcachefs checksum on /dev/loop3 [ 613.923829][ T9469] netlink: 24 bytes leftover after parsing attributes in process `syz.9.912'. [ 617.494729][ T9490] loop9: detected capacity change from 0 to 2048 [ 617.805153][ T9490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.569377][ T9507] loop3: detected capacity change from 0 to 1024 [ 618.681749][ T8878] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 618.736476][ T8878] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 618.880652][ T9507] ===================================================== [ 618.887878][ T8878] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.897369][ T9507] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x1173/0x17e0 [ 618.905155][ T9507] hfsplus_rename_cat+0x1173/0x17e0 [ 618.910786][ T9507] hfsplus_rename+0x1fc/0x2f0 [ 618.915694][ T9507] vfs_rename+0x1f51/0x2530 [ 618.920738][ T9507] do_renameat2+0x1484/0x1a50 [ 618.925639][ T9507] __x64_sys_renameat2+0x15d/0x210 [ 618.936486][ T9507] x64_sys_call+0x4ac/0x3e20 [ 618.943441][ T9507] do_syscall_64+0xd9/0x210 [ 618.955740][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.964486][ T9507] [ 618.967051][ T9507] Uninit was stored to memory at: [ 618.972316][ T9507] hfsplus_rename_cat+0x10a9/0x17e0 [ 618.977836][ T9507] hfsplus_rename+0x1fc/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 618.982733][ T9507] vfs_rename+0x1f51/0x2530 [ 618.989005][ T9507] do_renameat2+0x1484/0x1a50 [ 618.994235][ T9507] __x64_sys_renameat2+0x15d/0x210 [ 618.999784][ T9507] x64_sys_call+0x4ac/0x3e20 [ 619.004617][ T9507] do_syscall_64+0xd9/0x210 [ 619.009948][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.016235][ T9507] [ 619.018677][ T9507] Uninit was created at: [ 619.023199][ T9507] __alloc_frozen_pages_noprof+0x689/0xf00 [ 619.029368][ T9507] alloc_pages_mpol+0x328/0x860 [ 619.034460][ T9507] alloc_frozen_pages_noprof+0xf7/0x200 [ 619.041341][ T9507] allocate_slab+0x24d/0x1220 [ 619.046493][ T9507] ___slab_alloc+0x1024/0x34e0 [ 619.058976][ T9507] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 619.065320][ T9507] hfsplus_alloc_inode+0x5a/0xd0 [ 619.073163][ T9507] alloc_inode+0x8a/0x4a0 [ 619.077860][ T9507] iget_locked+0x239/0x12d0 [ 619.082591][ T9507] hfsplus_iget+0x5c/0xb80 [ 619.087994][ T9507] hfsplus_btree_open+0x128/0x1cf0 [ 619.093348][ T9507] hfsplus_fill_super+0x1161/0x2730 [ 619.099030][ T9507] get_tree_bdev_flags+0x6e3/0x920 [ 619.104399][ T9507] get_tree_bdev+0x38/0x50 [ 619.109211][ T9507] hfsplus_get_tree+0x35/0x40 [ 619.114120][ T9507] vfs_get_tree+0xb0/0x5c0 [ 619.119087][ T9507] do_new_mount+0x733/0x1420 [ 619.123928][ T9507] path_mount+0x6db/0x1e90 [ 619.128737][ T9507] __se_sys_mount+0x6eb/0x7d0 [ 619.133691][ T9507] __x64_sys_mount+0xe4/0x150 [ 619.138750][ T9507] x64_sys_call+0x3604/0x3e20 [ 619.143703][ T9507] do_syscall_64+0xd9/0x210 [ 619.148541][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.162652][ T9507] [ 619.165119][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.3.921 Not tainted 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 619.179369][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.190506][ T9507] ===================================================== [ 619.197681][ T9507] Disabling lock debugging due to kernel taint [ 619.203985][ T9507] Kernel panic - not syncing: kmsan.panic set ... [ 619.210732][ T9507] CPU: 0 UID: 0 PID: 9507 Comm: syz.3.921 Tainted: G B 6.16.0-syzkaller-11845-ga530a36bb548 #0 PREEMPT(none) [ 619.224109][ T9507] Tainted: [B]=BAD_PAGE [ 619.228392][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.238698][ T9507] Call Trace: [ 619.242101][ T9507] [ 619.245144][ T9507] __dump_stack+0x26/0x30 [ 619.249711][ T9507] dump_stack_lvl+0x53/0x270 [ 619.254522][ T9507] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 619.260568][ T9507] dump_stack+0x1e/0x25 [ 619.264954][ T9507] vpanic+0x361/0xc50 [ 619.269184][ T9507] panic+0x15d/0x160 [ 619.273465][ T9507] kmsan_report+0x31c/0x320 [ 619.278202][ T9507] ? __msan_warning+0x1b/0x30 [ 619.283069][ T9507] ? hfsplus_rename_cat+0x1173/0x17e0 [ 619.288688][ T9507] ? hfsplus_rename+0x1fc/0x2f0 [ 619.293772][ T9507] ? vfs_rename+0x1f51/0x2530 [ 619.298672][ T9507] ? do_renameat2+0x1484/0x1a50 [ 619.303831][ T9507] ? __x64_sys_renameat2+0x15d/0x210 [ 619.309545][ T9507] ? x64_sys_call+0x4ac/0x3e20 [ 619.314530][ T9507] ? do_syscall_64+0xd9/0x210 [ 619.319372][ T9507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.325609][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.330915][ T9507] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 619.336933][ T9507] ? hfsplus_bnode_dump+0x50a/0x560 [ 619.342354][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.347681][ T9507] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 619.353713][ T9507] ? hfsplus_brec_remove+0x92f/0xa60 [ 619.359271][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.364699][ T9507] __msan_warning+0x1b/0x30 [ 619.369382][ T9507] hfsplus_rename_cat+0x1173/0x17e0 [ 619.374813][ T9507] ? kfree+0x141/0xec0 [ 619.379062][ T9507] ? filter_irq_stacks+0x49/0x190 [ 619.384319][ T9507] ? stack_depot_save_flags+0x35/0x7b0 [ 619.390250][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.395533][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.400829][ T9507] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 619.407392][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.412697][ T9507] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 619.418693][ T9507] ? kmsan_get_metadata+0xfb/0x160 [ 619.423983][ T9507] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 619.430008][ T9507] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 619.436673][ T9507] hfsplus_rename+0x1fc/0x2f0 [ 619.441557][ T9507] ? __pfx_hfsplus_rename+0x10/0x10 [ 619.446962][ T9507] vfs_rename+0x1f51/0x2530 [ 619.451737][ T9507] do_renameat2+0x1484/0x1a50 [ 619.456675][ T9507] __x64_sys_renameat2+0x15d/0x210 [ 619.462102][ T9507] x64_sys_call+0x4ac/0x3e20 [ 619.466930][ T9507] do_syscall_64+0xd9/0x210 [ 619.471626][ T9507] ? irqentry_exit+0x16/0x60 [ 619.476406][ T9507] ? clear_bhb_loop+0x40/0x90 [ 619.481288][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.487374][ T9507] RIP: 0033:0x7f242818ebe9 [ 619.491934][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.511892][ T9507] RSP: 002b:00007f24290d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 619.520571][ T9507] RAX: ffffffffffffffda RBX: 00007f24283b5fa0 RCX: 00007f242818ebe9 [ 619.528888][ T9507] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 619.536993][ T9507] RBP: 00007f2428211e19 R08: 0000000000000001 R09: 0000000000000000 [ 619.545306][ T9507] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 619.553494][ T9507] R13: 00007f24283b6038 R14: 00007f24283b5fa0 R15: 00007ffefa256378 [ 619.561660][ T9507] [ 619.565342][ T9507] Kernel Offset: disabled [ 619.569846][ T9507] Rebooting in 86400 seconds..