last executing test programs: 3m54.923755666s ago: executing program 4 (id=509): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0x1000}}, 0x1006) 3m53.668389949s ago: executing program 4 (id=513): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r0, &(0x7f0000000880)}, 0x20) 3m53.289163942s ago: executing program 4 (id=514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m52.728498432s ago: executing program 4 (id=519): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0xfe, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) open(0x0, 0x10b942, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) 3m51.236037933s ago: executing program 4 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x126b, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) 3m49.770455139s ago: executing program 4 (id=535): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x658, 0x208, 0x328, 0xffffffff, 0x328, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 3m48.504204976s ago: executing program 32 (id=535): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x658, 0x208, 0x328, 0xffffffff, 0x328, 0x0, 0x588, 0x588, 0xffffffff, 0x588, 0x588, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) 1m52.562259304s ago: executing program 5 (id=1037): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m51.577472184s ago: executing program 5 (id=1043): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000010000000011,iocharset=cp948,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 1m50.341456279s ago: executing program 5 (id=1052): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1m49.204414394s ago: executing program 5 (id=1058): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 1m47.19172414s ago: executing program 5 (id=1068): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1m45.765337036s ago: executing program 5 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) close(r2) 1m45.172987414s ago: executing program 33 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) close(r2) 45.690555989s ago: executing program 3 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x7930, &(0x7f00000008c0)={0x0, 0x7ffd, 0x8, 0x3, 0xfffffff9}, &(0x7f0000000840)=0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0x10a5, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) 43.219609913s ago: executing program 3 (id=1310): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 42.517054785s ago: executing program 3 (id=1313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 41.440133553s ago: executing program 3 (id=1318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 39.240290861s ago: executing program 2 (id=1325): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2, 0x0, 0x400000}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_io_uring_setup(0xec5, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x4, 0x321}, &(0x7f0000000500), &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sysfs$1(0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendfile(r3, r3, 0x0, 0x800000009) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x7fffffff, 0x1ff, "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", 0x5, 0x1, 0x2, 0x4, 0x80, 0x6, 0x0, 0x1}}}, 0x120) 37.206459287s ago: executing program 2 (id=1330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xcd15}}}}}}, 0x0) 36.96688543s ago: executing program 3 (id=1331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioperm(0x6, 0x4, 0x2) 35.911643111s ago: executing program 2 (id=1333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 35.608939666s ago: executing program 3 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x7930, &(0x7f00000008c0)={0x0, 0x7ffd, 0x8, 0x3, 0xfffffff9}, &(0x7f0000000840)=0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0x10a5, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) 33.730305493s ago: executing program 34 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x7930, &(0x7f00000008c0)={0x0, 0x7ffd, 0x8, 0x3, 0xfffffff9}, &(0x7f0000000840)=0x0, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0x10a5, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) 33.692433955s ago: executing program 2 (id=1341): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 25.473122999s ago: executing program 6 (id=1365): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 25.006904768s ago: executing program 2 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xcd15}}}}}}, 0x0) 24.364855567s ago: executing program 6 (id=1369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000"], 0xffe) 23.401519648s ago: executing program 6 (id=1371): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x133, 0x0, 0x1, [@nested={0xc, 0x8a, 0x0, 0x1, [@nested={0x4, 0x123}, @generic="d12b0276"]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x4}, 0x0) 23.265139829s ago: executing program 2 (id=1372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x10000, &(0x7f0000000380)={[], [{@seclabel}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") 22.096638759s ago: executing program 35 (id=1372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x10000, &(0x7f0000000380)={[], [{@seclabel}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") 21.95055929s ago: executing program 6 (id=1376): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$eJzs3M1uG0UcAPD/bj5K0g8HiQMqHCyBIAiI60CAIiQKVz4uwANYSVoq3KZqjERLDgVx4sQBcePQF+DAA1QVQkLiFXgBVKlCaQ5wC1p713FjO8SKHdPk95NGnlmPO/Pf3a5mNrsTwLFVjogLETEREYsRUcq3p3mKW62U1XuwubG8tbmxnMT29kd/JZHk24p/K8k/T+aF+TQi/SbiqVvd7a7fuPlZrV5fvZ6XK40r1yrrN26+fPlK7dLqpdWr1dfPV6tLi29UXx1arD88+8L5iXcvnP3xj9Ldpenpmay/p/LvOuMYlnKU2/tkt6VhNzZm0+PuAAAA+5LmY//J5vi/FBPNXEspKhtj7RwAAAAwFNtv558AAADAEZaY+wMAAMARVzwH8GBzY7lIY3wc4dDdfyci5nbebd5qxz8Zj+V1pkb4fms5Iq49l5SyFCN6DxkAoNPdbPxzrtf4L40nO+qdiGiOh2aG3H55V7l7/JPeG3KTD8nGf29FxFbX+C8tqsxN5KXTzaHiVHLxcn31XESciYj5mDqRlat7tPHe3z992O+7LP5fk9NnipS1n33u1EjvTZ54+DcrtUbtIDF3uv9VxNnJXvEn7fFvEhGzB2hj4svbb/b77r/jH63t2xHP9zz+Oyv3JHuvT1Rpng+V4qzo9s/XP3/Qr/1xx58d/9m9459LOtdrWh+8jTuf/v50M9Mjqs75zyDn/3TycTNfzMu+qDUa16sR08n73dsXd35blIv6Wfzzz/T+/19c/5J8TatT+TVgUN9+98tLe9doxZ+lrP1iLngYsvhXBjr+g2deu/PbJ/3a7zz+vePPjn9rDbD5fMt+rn/77eBB9h0AAAA8KtLmfY0kXWjn03RhoXW/44mYTetr640XL659fnWldf9jLqbS4k5XqeN+aLX1Z/R2eXFX+ZWIeDwivi/NNMsLy2v1lXEHDwAAAMfEyT7z/8yfh/YUAgAAADByc+PuAAAAADBy5v8AAABwpB1kXb/jm8n23P+gGzIyI8uM+8oEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaPs3AAD//9oMtCQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 17.106079556s ago: executing program 1 (id=1383): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0"]) 16.842011248s ago: executing program 6 (id=1385): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}], 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x11, &(0x7f0000000380)={r2}, 0x8) 16.259734404s ago: executing program 1 (id=1386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x7930, &(0x7f00000008c0)={0x0, 0x7ffd, 0x8, 0x3, 0xfffffff9}, &(0x7f0000000840)=0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0xfffffffd, 0x10a5, 0x2, 0x0, 0x0) io_uring_enter(r1, 0x81e, 0xfffffff9, 0x1, 0x0, 0x0) 14.785088863s ago: executing program 1 (id=1387): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) ftruncate(r2, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r0}) 13.516999987s ago: executing program 6 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280050003000800000005000300050000", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.187168753s ago: executing program 36 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c070054001280080001006873720048000280050003000800000005000300050000", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.004194741s ago: executing program 1 (id=1392): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r3 = open_tree(r2, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x250) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') close_range(r1, 0xffffffffffffffff, 0x0) 10.234148403s ago: executing program 1 (id=1393): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 8.844611636s ago: executing program 1 (id=1397): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 7.883212741s ago: executing program 37 (id=1397): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}}, 0x0) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 2.586226209s ago: executing program 0 (id=1408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 1.757101483s ago: executing program 0 (id=1409): pipe2(0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c756e616d653dd0"]) 1.610495525s ago: executing program 0 (id=1410): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8001, 0x0, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)={0x14, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000015}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 1.132844665s ago: executing program 0 (id=1411): r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 474.789757ms ago: executing program 0 (id=1412): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 0s ago: executing program 0 (id=1413): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) kernel console output (not intermixed with test programs): process 7335 (syz.1.528) did not claim interface 0 before use [ 344.410876][ T5799] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.438001][ T3910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.602779][ T7318] kmmpd-loop4: attempt to access beyond end of device [ 344.602779][ T7318] loop4: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 344.619007][ T7318] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 344.840420][ T3910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.011141][ T3910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.215278][ T3910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.682517][ T3910] bridge_slave_1: left allmulticast mode [ 345.688736][ T3910] bridge_slave_1: left promiscuous mode [ 345.695353][ T3910] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.785661][ T3910] bridge_slave_0: left allmulticast mode [ 345.793626][ T3910] bridge_slave_0: left promiscuous mode [ 345.800721][ T3910] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.437951][ T3910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.513773][ T3910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.600788][ T3910] bond0 (unregistering): Released all slaves [ 347.365188][ T3910] IPVS: stopping master sync thread 7123 ... [ 347.639951][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.653124][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.669581][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.713645][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.739372][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.759543][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.093710][ T3910] hsr_slave_0: left promiscuous mode [ 348.152677][ T3910] hsr_slave_1: left promiscuous mode [ 348.169537][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.178353][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.248951][ T3910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.257103][ T3910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.348990][ T3910] veth1_macvtap: left promiscuous mode [ 348.354877][ T3910] veth0_macvtap: left promiscuous mode [ 348.361279][ T3910] veth1_vlan: left promiscuous mode [ 348.366831][ T3910] veth0_vlan: left promiscuous mode [ 349.897493][ T5794] Bluetooth: hci4: command tx timeout [ 349.978511][ T3910] team0 (unregistering): Port device team_slave_1 removed [ 350.001941][ T3910] team0 (unregistering): Port device team_slave_0 removed [ 352.045958][ T5794] Bluetooth: hci4: command tx timeout [ 352.072312][ T7415] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 352.626482][ T7371] chnl_net:caif_netlink_parms(): no params data found [ 353.286972][ T7429] netlink: 192 bytes leftover after parsing attributes in process `syz.0.561'. [ 353.951542][ T7371] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.959884][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.974778][ T7371] bridge_slave_0: entered allmulticast mode [ 354.097083][ T5794] Bluetooth: hci4: command tx timeout [ 354.111239][ T7371] bridge_slave_0: entered promiscuous mode [ 354.231422][ T7371] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.239644][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.247903][ T7371] bridge_slave_1: entered allmulticast mode [ 354.257107][ T7371] bridge_slave_1: entered promiscuous mode [ 354.467948][ T7450] netlink: 'syz.2.567': attribute type 153 has an invalid length. [ 354.710511][ T7371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.796984][ T7371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.271579][ T7371] team0: Port device team_slave_0 added [ 355.346177][ T7371] team0: Port device team_slave_1 added [ 355.408923][ T5912] hid-generic 0000:0D16:0000.0003: unknown main item tag 0x0 [ 355.416867][ T5912] hid-generic 0000:0D16:0000.0003: unknown main item tag 0x0 [ 355.494120][ T7466] loop3: detected capacity change from 0 to 1024 [ 355.512787][ T5912] hid-generic 0000:0D16:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 355.570490][ T7467] loop2: detected capacity change from 0 to 1024 [ 355.581608][ T7467] EXT4-fs: Ignoring removed nobh option [ 355.588032][ T7467] EXT4-fs: Ignoring removed orlov option [ 355.801863][ T7466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.873768][ T7467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.895500][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.902873][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.935392][ T7371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.955289][ T7371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.962722][ T7371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.989638][ T7371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.086632][ T29] audit: type=1800 audit(1733397866.656:435): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.574" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 356.177175][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.178156][ T5794] Bluetooth: hci4: command tx timeout [ 356.548084][ T7371] hsr_slave_0: entered promiscuous mode [ 356.602749][ T7483] loop1: detected capacity change from 0 to 512 [ 356.666762][ T7371] hsr_slave_1: entered promiscuous mode [ 356.696837][ T7371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.704822][ T7371] Cannot create hsr debugfs directory [ 356.772152][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.786102][ T7483] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.197997][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.589588][ T7497] loop2: detected capacity change from 0 to 512 [ 357.888954][ T7497] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.581: invalid indirect mapped block 4294967295 (level 1) [ 357.934575][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.014968][ T7497] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.581: invalid indirect mapped block 4294967295 (level 1) [ 358.075937][ T7497] EXT4-fs (loop2): 2 truncates cleaned up [ 358.089063][ T7497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.318903][ T7371] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.496611][ T7371] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.557723][ T7371] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.709255][ T7371] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.826729][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.207801][ T7534] loop2: detected capacity change from 0 to 512 [ 360.296645][ T7371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.353865][ T7371] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.382382][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.390165][ T4916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.595277][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.603062][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.858204][ T7534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.871529][ T7534] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.076390][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.207505][ T7371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.491405][ T7592] loop1: detected capacity change from 0 to 512 [ 364.686285][ T7592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.699508][ T7592] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.273373][ T29] audit: type=1326 audit(1733397875.846:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 365.296813][ T29] audit: type=1326 audit(1733397875.846:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 365.319455][ T29] audit: type=1326 audit(1733397875.846:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7606 comm="syz.0.614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 366.011835][ T7371] veth0_vlan: entered promiscuous mode [ 366.129073][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.153956][ T7371] veth1_vlan: entered promiscuous mode [ 366.349991][ T7371] veth0_macvtap: entered promiscuous mode [ 366.532681][ T7371] veth1_macvtap: entered promiscuous mode [ 366.657480][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.670266][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.681147][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.691994][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.702293][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.713082][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.723276][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.734061][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.748913][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.809912][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.820910][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.831071][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.841845][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.851978][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.862773][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.874878][ T7371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.886619][ T7371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.901403][ T7371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.020454][ T7371] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.030300][ T7371] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.039676][ T7371] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.048833][ T7371] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.224216][ T7628] loop1: detected capacity change from 0 to 512 [ 367.257677][ T7620] loop3: detected capacity change from 0 to 1024 [ 367.733678][ T7620] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.879009][ T7628] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 367.892714][ T7628] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 367.903689][ T7628] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.618: Failed to acquire dquot type 1 [ 368.039968][ T7628] EXT4-fs (loop1): 1 truncate cleaned up [ 368.047752][ T7628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.062112][ T7628] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.230994][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.763598][ T7651] loop3: detected capacity change from 0 to 512 [ 368.862608][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.100033][ T7651] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.626: invalid indirect mapped block 4294967295 (level 1) [ 369.178697][ T7651] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.626: invalid indirect mapped block 4294967295 (level 1) [ 369.271404][ T7651] EXT4-fs (loop3): 2 truncates cleaned up [ 369.279395][ T7651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.466841][ T7664] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 370.498174][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.404263][ T7692] loop2: detected capacity change from 0 to 2048 [ 371.557878][ T7692] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 371.618795][ T7692] System zones: 0-7 [ 371.637970][ T7692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.891871][ T7701] loop3: detected capacity change from 0 to 512 [ 371.906261][ T7698] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 371.944848][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 372.149783][ T7701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.163112][ T7701] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.290745][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.913555][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.351955][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.360690][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.027921][ T4916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.041143][ T4916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.523433][ T7742] loop1: detected capacity change from 0 to 2048 [ 374.639951][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 375.140645][ T29] audit: type=1326 audit(1733397885.696:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.165510][ T29] audit: type=1326 audit(1733397885.696:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.188936][ T29] audit: type=1326 audit(1733397885.696:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.211626][ T29] audit: type=1326 audit(1733397885.696:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.234374][ T29] audit: type=1326 audit(1733397885.696:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.257549][ T29] audit: type=1326 audit(1733397885.696:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.281755][ T29] audit: type=1326 audit(1733397885.696:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.305137][ T29] audit: type=1326 audit(1733397885.706:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.327888][ T29] audit: type=1326 audit(1733397885.706:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.350674][ T29] audit: type=1326 audit(1733397885.706:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.3.655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 375.772596][ T7742] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 375.896971][ T7742] System zones: 0-7 [ 376.105113][ T7742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.242792][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 376.401723][ T7768] dvmrp0: entered allmulticast mode [ 376.726076][ T7779] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 376.771577][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.443097][ T7789] loop1: detected capacity change from 0 to 256 [ 379.378284][ T7822] loop2: detected capacity change from 0 to 1024 [ 379.458333][ T7822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.634653][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.126846][ T7835] program syz.0.681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.994646][ T7866] loop2: detected capacity change from 0 to 128 [ 382.368842][ T7873] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.741945][ T7896] loop5: detected capacity change from 0 to 512 [ 383.878580][ T7896] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.703: invalid indirect mapped block 4294967295 (level 1) [ 383.976403][ T7896] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.703: invalid indirect mapped block 4294967295 (level 1) [ 384.126575][ T7896] EXT4-fs (loop5): 2 truncates cleaned up [ 384.134294][ T7896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.475083][ T7896] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.703: path /8/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 384.610885][ T7905] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 384.619875][ T7905] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 384.628776][ T7905] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 384.850033][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 384.859527][ T7913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.707'. [ 384.951406][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.562536][ T7922] program syz.5.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.563808][ T7933] loop5: detected capacity change from 0 to 2048 [ 386.749276][ T7933] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 386.847759][ T7933] System zones: 0-7 [ 386.889404][ T7933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.200041][ T7943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.718'. [ 387.570349][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.807468][ T7953] program syz.3.723 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.306261][ T7954] loop1: detected capacity change from 0 to 256 [ 388.719984][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 388.720062][ T29] audit: type=1326 audit(1733397899.276:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.750471][ T29] audit: type=1326 audit(1733397899.296:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.773105][ T29] audit: type=1326 audit(1733397899.296:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.854686][ T29] audit: type=1326 audit(1733397899.376:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.877443][ T29] audit: type=1326 audit(1733397899.376:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.907865][ T29] audit: type=1326 audit(1733397899.376:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.930722][ T29] audit: type=1326 audit(1733397899.386:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.953890][ T29] audit: type=1326 audit(1733397899.386:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 388.976710][ T29] audit: type=1326 audit(1733397899.426:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 389.005078][ T29] audit: type=1326 audit(1733397899.526:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7960 comm="syz.2.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 389.281180][ T7970] loop3: detected capacity change from 0 to 512 [ 389.337601][ T7970] ext4: Unknown parameter 'seclabel' [ 390.332747][ T7990] program syz.5.734 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 390.961193][ T7999] loop1: detected capacity change from 0 to 256 [ 391.627331][ T8008] loop5: detected capacity change from 0 to 512 [ 391.688446][ T8008] ext4: Unknown parameter 'seclabel' [ 392.302290][ T8018] dccp_invalid_packet: P.Data Offset(224) too large [ 392.337287][ T8021] program syz.5.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.690747][ T8027] netlink: 356 bytes leftover after parsing attributes in process `syz.1.748'. [ 393.134749][ T8032] loop3: detected capacity change from 0 to 128 [ 393.674705][ T8039] syz.3.749: attempt to access beyond end of device [ 393.674705][ T8039] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 393.809651][ T8041] loop2: detected capacity change from 0 to 256 [ 394.282122][ T8049] tmpfs: Bad value for 'mpol' [ 394.332174][ T3569] kworker/u8:10: attempt to access beyond end of device [ 394.332174][ T3569] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 394.975469][ T8061] netlink: 356 bytes leftover after parsing attributes in process `syz.2.762'. [ 395.357734][ T8068] program syz.5.760 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.234251][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 396.234326][ T29] audit: type=1326 audit(1733397906.796:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7fc00000 [ 396.347277][ T29] audit: type=1326 audit(1733397906.866:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7fc00000 [ 396.351989][ T8078] loop5: detected capacity change from 0 to 256 [ 397.768131][ T8099] netlink: 356 bytes leftover after parsing attributes in process `syz.5.773'. [ 398.497244][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.776'. [ 398.681340][ T8112] program syz.3.777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.769112][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 399.363033][ T8119] loop1: detected capacity change from 0 to 256 [ 400.189342][ T8132] netlink: 356 bytes leftover after parsing attributes in process `syz.1.784'. [ 400.403640][ T8103] loop5: detected capacity change from 0 to 32768 [ 400.634729][ T8103] [ 400.634729][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 400.634729][ T8103] [ 400.867081][ T8103] [ 400.867081][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 400.867081][ T8103] [ 400.878206][ T8103] [ 400.878206][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 400.878206][ T8103] [ 400.889266][ T8103] [ 400.889266][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 400.889266][ T8103] [ 401.128505][ T8103] [ 401.128505][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.128505][ T8103] [ 401.427217][ T8148] [ 401.427217][ T8148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.427217][ T8148] [ 401.439322][ T8148] [ 401.439322][ T8148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.439322][ T8148] [ 401.450989][ T8148] [ 401.450989][ T8148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.450989][ T8148] [ 401.462654][ T8148] [ 401.462654][ T8148] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.462654][ T8148] [ 401.499959][ T111] [ 401.499959][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.499959][ T111] [ 401.764060][ T8104] [ 401.764060][ T8104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.764060][ T8104] [ 401.775090][ T8104] [ 401.775090][ T8104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.775090][ T8104] [ 401.788653][ T8104] [ 401.788653][ T8104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.788653][ T8104] [ 401.800088][ T8104] [ 401.800088][ T8104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 401.800088][ T8104] [ 401.866161][ T29] audit: type=1326 audit(1733397912.406:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7fc00000 [ 401.891895][ T29] audit: type=1326 audit(1733397912.416:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8144 comm="syz.1.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7fc00000 [ 402.027031][ T8104] [ 402.027031][ T8104] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.027031][ T8104] [ 402.039754][ T8103] [ 402.039754][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.039754][ T8103] [ 402.050893][ T8103] [ 402.050893][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.050893][ T8103] [ 402.061750][ T8103] [ 402.061750][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.061750][ T8103] [ 402.083445][ T112] [ 402.083445][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.083445][ T112] [ 402.212577][ T8103] [ 402.212577][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.212577][ T8103] [ 402.224646][ T8103] [ 402.224646][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.224646][ T8103] [ 402.236247][ T8103] [ 402.236247][ T8103] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.236247][ T8103] [ 402.250379][ T111] [ 402.250379][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.250379][ T111] [ 402.518062][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 402.765339][ T8161] program syz.2.792 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.902179][ T8163] loop2: detected capacity change from 0 to 256 [ 402.946225][ T5070] [ 402.946225][ T5070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.946225][ T5070] [ 402.957750][ T5070] [ 402.957750][ T5070] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.957750][ T5070] [ 402.989638][ T7371] [ 402.989638][ T7371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 402.989638][ T7371] [ 403.001057][ T7371] [ 403.001057][ T7371] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 403.001057][ T7371] [ 403.019616][ T112] [ 403.019616][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 403.019616][ T112] [ 403.974430][ T8177] netlink: 356 bytes leftover after parsing attributes in process `syz.3.798'. [ 405.030539][ T8193] program syz.2.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.288002][ T8195] loop1: detected capacity change from 0 to 16 [ 405.477235][ T8195] erofs (device loop1): mounted with root inode @ nid 36. [ 406.275236][ T8195] syz.1.802: attempt to access beyond end of device [ 406.275236][ T8195] loop1: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 406.291982][ T8195] erofs (device loop1): failed to decompress -2 in[1, 1440] out[1677] [ 406.301443][ T8195] erofs (device loop1): read error -5 @ 87 of nid 36 [ 406.308619][ T8195] erofs (device loop1): fail to readdir of logical block 87 of nid 36 [ 406.357102][ T29] audit: type=1326 audit(1733397916.906:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8199 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7677ff19 code=0x7fc00000 [ 406.380025][ T29] audit: type=1326 audit(1733397916.906:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8199 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7677ff19 code=0x7fc00000 [ 406.584056][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 406.618939][ T8208] loop2: detected capacity change from 0 to 256 [ 406.983713][ T8214] netlink: 356 bytes leftover after parsing attributes in process `syz.0.810'. [ 408.041596][ T8232] netlink: 'syz.2.811': attribute type 3 has an invalid length. [ 408.515448][ T8240] program syz.5.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.649573][ T8242] loop2: detected capacity change from 0 to 128 [ 408.738936][ T29] audit: type=1800 audit(1733397919.286:486): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.819" name="bus" dev="loop2" ino=1048622 res=0 errno=0 [ 409.595096][ T8253] netlink: 356 bytes leftover after parsing attributes in process `syz.3.824'. [ 410.122387][ T8258] loop2: detected capacity change from 0 to 128 [ 412.480480][ T8293] loop2: detected capacity change from 0 to 512 [ 412.824931][ T8293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.838404][ T8293] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.614661][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.352738][ T8338] loop7: detected capacity change from 0 to 16384 [ 415.962817][ T8362] loop5: detected capacity change from 0 to 128 [ 416.138260][ T8362] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.197880][ T8362] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.822677][ T8376] loop3: detected capacity change from 0 to 128 [ 416.840307][ T7371] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.937832][ T8392] loop2: detected capacity change from 0 to 512 [ 418.002237][ T8392] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 418.012949][ T8392] EXT4-fs (loop2): group descriptors corrupted! [ 418.257706][ T8392] bridge0: port 3(macvlan1) entered blocking state [ 418.264902][ T8392] bridge0: port 3(macvlan1) entered disabled state [ 418.274926][ T8392] macvlan1: entered allmulticast mode [ 418.280729][ T8392] veth1_vlan: entered allmulticast mode [ 418.289296][ T8392] macvlan1: entered promiscuous mode [ 418.299293][ T8392] bridge0: port 3(macvlan1) entered blocking state [ 418.306588][ T8392] bridge0: port 3(macvlan1) entered forwarding state [ 418.574438][ T8399] loop5: detected capacity change from 0 to 2048 [ 418.818298][ T8399] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 418.827544][ T8399] System zones: 0-7 [ 418.834093][ T8399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.535586][ T8418] loop1: detected capacity change from 0 to 128 [ 420.669971][ T8430] netlink: 44 bytes leftover after parsing attributes in process `syz.2.885'. [ 420.752527][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.272761][ T8435] loop3: detected capacity change from 0 to 128 [ 421.461468][ T8440] loop2: detected capacity change from 0 to 128 [ 422.439204][ T8435] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.448397][ T8456] loop5: detected capacity change from 0 to 2048 [ 422.520159][ T8435] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.665433][ T8456] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 422.721661][ T8456] System zones: 0-7 [ 422.728350][ T8456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.738176][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.918443][ T8456] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 423.090369][ T8456] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 423.103546][ T8456] EXT4-fs (loop5): This should not happen!! Data will be lost [ 423.103546][ T8456] [ 423.113692][ T8456] EXT4-fs (loop5): Total free blocks count 0 [ 423.120411][ T8456] EXT4-fs (loop5): Free/Dirty block details [ 423.126734][ T8456] EXT4-fs (loop5): free_blocks=2415919104 [ 423.132706][ T8456] EXT4-fs (loop5): dirty_blocks=16 [ 423.138340][ T8456] EXT4-fs (loop5): Block reservation details [ 423.144563][ T8456] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 423.672539][ T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 423.709718][ T8474] loop1: detected capacity change from 0 to 128 [ 424.328201][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 424.337533][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 425.343028][ T8494] loop3: detected capacity change from 0 to 128 [ 425.756140][ T8494] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.809706][ T8494] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 426.027554][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.311527][ T8520] loop1: detected capacity change from 0 to 256 [ 427.928201][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 427.938174][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 428.156151][ T8520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 429.284249][ T8539] loop5: detected capacity change from 0 to 128 [ 429.892814][ T8539] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 429.982480][ T8539] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.145553][ T8553] loop2: detected capacity change from 0 to 512 [ 430.466232][ T8553] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.921: bg 0: block 393: padding at end of block bitmap is not set [ 430.526788][ T8553] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 430.569488][ T8553] EXT4-fs (loop2): 2 truncates cleaned up [ 430.577555][ T8553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.620441][ T7371] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.796450][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.314732][ T8579] loop1: detected capacity change from 0 to 128 [ 433.047688][ T8583] loop2: detected capacity change from 0 to 128 [ 433.167127][ T29] audit: type=1800 audit(1733397943.746:487): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.928" name="bus" dev="loop2" ino=1048628 res=0 errno=0 [ 433.291090][ T8586] loop3: detected capacity change from 0 to 512 [ 433.299892][ T8586] ext4: Unknown parameter 'seclabel' [ 433.478953][ T8588] 9pnet_fd: Insufficient options for proto=fd [ 433.651685][ T8588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.949759][ T8610] loop1: detected capacity change from 0 to 256 [ 434.958641][ T8611] program syz.3.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.302409][ T8615] program syz.2.940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.321478][ T8610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 435.909565][ T8627] loop3: detected capacity change from 0 to 256 [ 436.244413][ T8630] loop2: detected capacity change from 0 to 128 [ 436.328883][ T29] audit: type=1804 audit(1733397946.896:488): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.944" name="/newroot/194/file1/file0" dev="loop3" ino=1048630 res=1 errno=0 [ 436.541461][ T29] audit: type=1800 audit(1733397947.026:489): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.945" name="bus" dev="loop2" ino=1048631 res=0 errno=0 [ 439.462965][ T8667] loop5: detected capacity change from 0 to 256 [ 439.689253][ T8667] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 440.347933][ T8673] loop3: detected capacity change from 0 to 164 [ 440.495040][ T8673] syz.3.959: attempt to access beyond end of device [ 440.495040][ T8673] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 440.509643][ T8673] syz.3.959: attempt to access beyond end of device [ 440.509643][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 440.536144][ T29] audit: type=1800 audit(1733397951.106:490): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.959" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 440.771652][ T8673] syz.3.959: attempt to access beyond end of device [ 440.771652][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 440.803870][ T8673] syz.3.959: attempt to access beyond end of device [ 440.803870][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 440.832641][ T8673] syz.3.959: attempt to access beyond end of device [ 440.832641][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 440.892417][ T8673] syz.3.959: attempt to access beyond end of device [ 440.892417][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 441.041435][ T8673] syz.3.959: attempt to access beyond end of device [ 441.041435][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 441.189684][ T8673] syz.3.959: attempt to access beyond end of device [ 441.189684][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 441.377534][ T8673] syz.3.959: attempt to access beyond end of device [ 441.377534][ T8673] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 441.604031][ T29] audit: type=1326 audit(1733397952.166:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 441.609413][ T8678] syz.3.959: attempt to access beyond end of device [ 441.609413][ T8678] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 441.628630][ T29] audit: type=1326 audit(1733397952.166:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 441.628856][ T29] audit: type=1326 audit(1733397952.166:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 441.629071][ T29] audit: type=1326 audit(1733397952.166:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 441.629290][ T29] audit: type=1326 audit(1733397952.166:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 441.629504][ T29] audit: type=1326 audit(1733397952.176:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 442.121160][ T29] audit: type=1326 audit(1733397952.576:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 442.149903][ T29] audit: type=1326 audit(1733397952.666:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 442.175151][ T29] audit: type=1326 audit(1733397952.666:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.2.963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7ffc0000 [ 444.649206][ T8715] loop2: detected capacity change from 0 to 256 [ 444.844528][ T8715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 444.863959][ T8717] loop3: detected capacity change from 0 to 512 [ 444.866641][ T8717] EXT4-fs: Ignoring removed nobh option [ 444.866770][ T8717] EXT4-fs: Ignoring removed mblk_io_submit option [ 444.971793][ T8717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.084667][ T8736] loop5: detected capacity change from 0 to 1024 [ 446.527983][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.088643][ T8736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.570112][ T8754] EXT4-fs (loop5): shut down requested (0) [ 448.140422][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.985'. [ 448.165417][ T8771] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 448.287591][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.248405][ T8782] loop1: detected capacity change from 0 to 128 [ 449.750938][ T8779] loop5: detected capacity change from 0 to 512 [ 449.843640][ T8779] EXT4-fs: Ignoring removed nobh option [ 449.849639][ T8779] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.934630][ T8779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.416182][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 450.416266][ T29] audit: type=1800 audit(1733397960.856:581): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.988" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 451.906370][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.317708][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.996'. [ 453.408266][ T8807] loop3: detected capacity change from 0 to 164 [ 453.752151][ T8807] bio_check_eod: 175 callbacks suppressed [ 453.752234][ T8807] syz.3.1000: attempt to access beyond end of device [ 453.752234][ T8807] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 453.774841][ T8807] syz.3.1000: attempt to access beyond end of device [ 453.774841][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 453.809979][ T29] audit: type=1800 audit(1733397964.366:582): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1000" name="file0" dev="loop3" ino=1862 res=0 errno=0 [ 454.022468][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.022468][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.095496][ T8813] loop1: detected capacity change from 0 to 512 [ 454.096626][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.096626][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.234585][ T8813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.247978][ T8813] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.271113][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.271113][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.286089][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.286089][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.301964][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.301964][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.319342][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.319342][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.334026][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.334026][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.403115][ T8807] syz.3.1000: attempt to access beyond end of device [ 454.403115][ T8807] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 454.948523][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.183709][ T8829] loop5: detected capacity change from 0 to 1024 [ 455.643207][ T8829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.690298][ T8835] loop3: detected capacity change from 0 to 256 [ 455.811143][ T8829] EXT4-fs (loop5): shut down requested (0) [ 455.938634][ T8835] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 457.063421][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.603732][ T8861] loop5: detected capacity change from 0 to 512 [ 459.158324][ T8861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.171887][ T8861] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.727366][ T8886] loop1: detected capacity change from 0 to 256 [ 459.925925][ T29] audit: type=1326 audit(1733397970.476:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 459.954840][ T29] audit: type=1326 audit(1733397970.486:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 459.980103][ T29] audit: type=1326 audit(1733397970.496:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.002794][ T29] audit: type=1326 audit(1733397970.496:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.026216][ T29] audit: type=1326 audit(1733397970.496:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.224542][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.246303][ T29] audit: type=1326 audit(1733397970.646:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.270703][ T29] audit: type=1326 audit(1733397970.646:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.294150][ T29] audit: type=1326 audit(1733397970.646:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.317055][ T29] audit: type=1326 audit(1733397970.716:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f86ef57ff19 code=0x7ffc0000 [ 460.319851][ T8886] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 460.398382][ T29] audit: type=1326 audit(1733397970.966:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f86ef5b27c5 code=0x7ffc0000 [ 462.747316][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1039'. [ 463.238227][ T8928] loop2: detected capacity change from 0 to 128 [ 463.506389][ T8930] loop5: detected capacity change from 0 to 256 [ 463.658964][ T8928] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.681249][ T8928] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.731697][ T8930] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 464.202904][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.749865][ T8967] loop5: detected capacity change from 0 to 512 [ 465.869405][ T8967] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.1058: casefold flag without casefold feature [ 466.073069][ T8967] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1058: couldn't read orphan inode 15 (err -117) [ 466.158918][ T8967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.329575][ T8970] loop2: detected capacity change from 0 to 128 [ 466.844421][ T8970] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.906826][ T8970] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.067270][ T8977] loop5: detected capacity change from 512 to 0 [ 467.388587][ T7371] bio_check_eod: 158 callbacks suppressed [ 467.388670][ T7371] syz-executor: attempt to access beyond end of device [ 467.388670][ T7371] loop5: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 467.408527][ T7371] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 467.437883][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.559116][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.559116][ T3692] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 467.574145][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.574145][ T3692] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 467.592642][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.592642][ T3692] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 467.609912][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.609912][ T3692] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 467.624333][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.624333][ T3692] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 467.641696][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.641696][ T3692] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 467.656927][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.656927][ T3692] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 467.671113][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.671113][ T3692] loop5: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 467.685114][ T3692] kworker/u8:14: attempt to access beyond end of device [ 467.685114][ T3692] loop5: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 467.699679][ T3692] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4558: inode #2: block 5: comm kworker/u8:14: unable to read itable block [ 467.713986][ T3692] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 467.722709][ T3692] EXT4-fs (loop5): I/O error while writing superblock [ 467.740415][ T7371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.760420][ T7371] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 467.769366][ T7371] EXT4-fs (loop5): I/O error while writing superblock [ 468.626745][ T4777] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.280592][ T4777] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.460916][ T4777] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.605319][ T4777] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.650861][ T9014] loop2: detected capacity change from 0 to 128 [ 469.755260][ T9014] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.796615][ T9014] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 469.932951][ T4777] bridge_slave_1: left allmulticast mode [ 469.939090][ T4777] bridge_slave_1: left promiscuous mode [ 469.945916][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.028807][ T4777] bridge_slave_0: left allmulticast mode [ 470.034719][ T4777] bridge_slave_0: left promiscuous mode [ 470.041608][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.591764][ T4777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.591773][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.699547][ T4777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.740684][ T4777] bond0 (unregistering): Released all slaves [ 471.026536][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.077936][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.114656][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.201539][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.222893][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 471.238359][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.239614][ T4777] IPVS: stopping master sync thread 7779 ... [ 471.530527][ T9034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1083'. [ 472.795194][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 472.795276][ T29] audit: type=1326 audit(1733397983.366:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9027 comm="syz.2.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7fc00000 [ 473.501162][ T5794] Bluetooth: hci4: command tx timeout [ 473.813868][ T4777] hsr_slave_0: left promiscuous mode [ 473.856858][ T4777] hsr_slave_1: left promiscuous mode [ 473.955966][ T9065] loop1: detected capacity change from 0 to 128 [ 473.962982][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.970868][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.989061][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.998113][ T4777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.048247][ T4777] veth1_macvtap: left promiscuous mode [ 474.054031][ T4777] veth0_macvtap: left promiscuous mode [ 474.060594][ T4777] veth1_vlan: left promiscuous mode [ 474.066132][ T4777] veth0_vlan: left promiscuous mode [ 474.479659][ T9065] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.566897][ T9065] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 475.600894][ T5794] Bluetooth: hci4: command tx timeout [ 476.162575][ T4777] team0 (unregistering): Port device team_slave_1 removed [ 476.233219][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.277756][ T4777] team0 (unregistering): Port device team_slave_0 removed [ 477.698715][ T5794] Bluetooth: hci4: command tx timeout [ 478.454864][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 478.952558][ T9104] loop3: detected capacity change from 0 to 128 [ 479.058463][ T9104] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.157343][ T9104] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.605915][ T5792] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.822252][ T5794] Bluetooth: hci4: command tx timeout [ 480.196701][ T29] audit: type=1326 audit(1733397990.686:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7fc00000 [ 480.219596][ T29] audit: type=1326 audit(1733397990.686:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9090 comm="syz.2.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x7fc00000 [ 480.471614][ T29] audit: type=1326 audit(1733397990.976:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 480.494637][ T29] audit: type=1326 audit(1733397991.026:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 480.517938][ T29] audit: type=1326 audit(1733397991.046:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 480.544982][ T29] audit: type=1326 audit(1733397991.046:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 480.569238][ T29] audit: type=1326 audit(1733397991.046:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9118 comm="syz.3.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 480.730525][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.745595][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.753604][ T9026] bridge_slave_0: entered allmulticast mode [ 480.762579][ T9026] bridge_slave_0: entered promiscuous mode [ 480.906118][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.913816][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.921830][ T9026] bridge_slave_1: entered allmulticast mode [ 480.930918][ T9026] bridge_slave_1: entered promiscuous mode [ 481.271350][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.392517][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.784728][ T9133] loop1: detected capacity change from 0 to 512 [ 481.809213][ T9026] team0: Port device team_slave_0 added [ 481.849658][ T9026] team0: Port device team_slave_1 added [ 481.913237][ T9133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.927926][ T9133] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.995346][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.002941][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.029462][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.047930][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.055214][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.083421][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.796044][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.904909][ T9026] hsr_slave_0: entered promiscuous mode [ 482.915157][ T9026] hsr_slave_1: entered promiscuous mode [ 482.927263][ T9026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.935047][ T9026] Cannot create hsr debugfs directory [ 483.754212][ T9151] loop1: detected capacity change from 0 to 1024 [ 483.871530][ T9151] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 483.881907][ T9151] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 483.892003][ T9151] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 483.996452][ T9151] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #5: comm syz.1.1118: unexpected bad inode w/o EXT4_IGET_BAD [ 484.073010][ T9151] EXT4-fs (loop1): no journal found [ 484.078931][ T9151] EXT4-fs (loop1): can't get journal size [ 484.172762][ T9151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.264084][ T9026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 485.288653][ T9172] loop3: detected capacity change from 0 to 256 [ 485.353374][ T9026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 485.457387][ T9026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 485.543904][ T9172] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 485.560263][ T9026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 485.969143][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.813343][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.478099][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.548185][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.555914][ T4916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.571582][ T4916] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.579329][ T4916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.727796][ T9026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.739487][ T9026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.383751][ T9193] loop1: detected capacity change from 0 to 512 [ 488.792450][ T9193] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.1128: casefold flag without casefold feature [ 488.841161][ T9193] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1128: couldn't read orphan inode 15 (err -117) [ 488.860650][ T9193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.462279][ T9026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.748394][ T29] audit: type=1800 audit(1733398000.056:605): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1128" name="file1" dev="loop1" ino=19 res=0 errno=0 [ 491.983499][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.641659][ T9026] veth0_vlan: entered promiscuous mode [ 493.674900][ T9026] veth1_vlan: entered promiscuous mode [ 493.761276][ T9026] veth0_macvtap: entered promiscuous mode [ 493.784772][ T9026] veth1_macvtap: entered promiscuous mode [ 493.833528][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.846352][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.858687][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.869533][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.879735][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.890524][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.900714][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.911507][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.926321][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.951283][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.962115][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.972242][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.983198][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.993369][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.004239][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.014362][ T9026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.025304][ T9026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.040383][ T9026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.154906][ T9026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.164181][ T9026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.173421][ T9026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.182716][ T9026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.295369][ T9255] loop1: detected capacity change from 0 to 1024 [ 495.546244][ T9255] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 495.556507][ T9255] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 495.566678][ T9255] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 495.702266][ T9255] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #5: comm syz.1.1143: unexpected bad inode w/o EXT4_IGET_BAD [ 495.756455][ T9255] EXT4-fs (loop1): no journal found [ 495.762086][ T9255] EXT4-fs (loop1): can't get journal size [ 495.869063][ T9255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.885248][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.919352][ T29] audit: type=1326 audit(1733398008.486:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9291 comm="syz.0.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x0 [ 498.997354][ T9308] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1155'. [ 501.017126][ T9333] loop3: detected capacity change from 0 to 1024 [ 501.124895][ T9347] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1167'. [ 501.206225][ T9333] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 501.218442][ T9333] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 501.229088][ T9333] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 501.271603][ T9333] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #5: comm syz.3.1163: unexpected bad inode w/o EXT4_IGET_BAD [ 501.399313][ T9333] EXT4-fs (loop3): no journal found [ 501.404953][ T9333] EXT4-fs (loop3): can't get journal size [ 501.471827][ T9333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.566884][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.575175][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.643704][ T4916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.652087][ T4916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.972295][ T9372] loop6: detected capacity change from 0 to 512 [ 503.013542][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.047086][ T9372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 503.064107][ T9372] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 503.117619][ T9376] netlink: 'syz.0.1176': attribute type 4 has an invalid length. [ 503.167247][ T9375] program syz.2.1175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.471875][ T9372] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 503.599935][ T9372] EXT4-fs (loop6): 1 truncate cleaned up [ 503.608244][ T9372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.782572][ T9385] loop3: detected capacity change from 0 to 512 [ 503.887456][ T9385] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 504.284100][ T9385] EXT4-fs (loop3): 1 truncate cleaned up [ 504.298519][ T9385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.354457][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.513465][ T9400] loop2: detected capacity change from 0 to 1024 [ 504.574381][ T9400] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 504.584780][ T9400] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 504.599991][ T9400] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 504.723842][ T9400] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.1183: unexpected bad inode w/o EXT4_IGET_BAD [ 504.766960][ T9400] EXT4-fs (loop2): no journal found [ 504.772437][ T9400] EXT4-fs (loop2): can't get journal size [ 504.809065][ T9400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.008580][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.110883][ T9411] 9pnet_fd: Insufficient options for proto=fd [ 505.762659][ T9419] loop1: detected capacity change from 0 to 512 [ 505.817817][ T9419] EXT4-fs: Ignoring removed nobh option [ 505.828950][ T9419] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.945377][ T9419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.155976][ T29] audit: type=1800 audit(1733398016.666:607): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1188" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 506.586821][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.735610][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.038263][ T9455] 9pnet_fd: Insufficient options for proto=fd [ 508.823224][ T9468] loop2: detected capacity change from 0 to 1024 [ 508.843363][ T9467] loop1: detected capacity change from 0 to 512 [ 508.870706][ T9467] EXT4-fs: Ignoring removed nobh option [ 508.876823][ T9467] EXT4-fs: Ignoring removed mblk_io_submit option [ 508.887669][ T9468] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 508.901530][ T9468] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 508.912794][ T9468] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 509.039796][ T9466] loop3: detected capacity change from 0 to 2048 [ 509.071718][ T9467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.087639][ T9468] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.1203: unexpected bad inode w/o EXT4_IGET_BAD [ 509.193841][ T9468] EXT4-fs (loop2): no journal found [ 509.199688][ T9468] EXT4-fs (loop2): can't get journal size [ 509.221224][ T9466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.265563][ T29] audit: type=1800 audit(1733398019.836:608): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1202" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 509.328772][ T9468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 509.546487][ T29] audit: type=1800 audit(1733398020.096:609): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1201" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 509.567383][ T29] audit: type=1800 audit(1733398020.096:610): pid=9466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1201" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 510.168846][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.247506][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.190366][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.201858][ T29] audit: type=1326 audit(1733398021.766:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.0.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ef57ff19 code=0x0 [ 511.537533][ T9516] 9pnet_fd: Insufficient options for proto=fd [ 512.300115][ T29] audit: type=1326 audit(1733398022.846:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.2.1215" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae4297ff19 code=0x0 [ 513.105186][ T9535] loop6: detected capacity change from 0 to 256 [ 513.126570][ T9534] loop3: detected capacity change from 0 to 2048 [ 513.192150][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1222'. [ 513.205417][ T9539] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1222'. [ 513.466078][ T9534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.630339][ T9543] loop2: detected capacity change from 0 to 1024 [ 513.806680][ T9543] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 513.820648][ T9543] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 513.831897][ T9543] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 513.845475][ T29] audit: type=1800 audit(1733398024.426:613): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1220" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 513.870397][ T9543] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.1223: unexpected bad inode w/o EXT4_IGET_BAD [ 513.947623][ T9543] EXT4-fs (loop2): no journal found [ 513.953354][ T9543] EXT4-fs (loop2): can't get journal size [ 514.055431][ T9543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.430524][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.955992][ T29] audit: type=1326 audit(1733398025.526:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.080429][ T29] audit: type=1326 audit(1733398025.586:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.103507][ T29] audit: type=1326 audit(1733398025.606:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.126643][ T29] audit: type=1326 audit(1733398025.606:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.154027][ T29] audit: type=1326 audit(1733398025.626:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.178222][ T29] audit: type=1326 audit(1733398025.626:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.200993][ T29] audit: type=1326 audit(1733398025.626:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9a37ff19 code=0x7ffc0000 [ 515.369298][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.819194][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 515.819359][ T9580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1234'. [ 516.302637][ T9583] loop1: detected capacity change from 0 to 512 [ 516.352106][ T9583] EXT4-fs: Ignoring removed nobh option [ 516.358316][ T9583] EXT4-fs: Ignoring removed mblk_io_submit option [ 516.801279][ T9583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.940062][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 516.940141][ T29] audit: type=1800 audit(1733398027.516:653): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1237" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 517.125161][ T9597] loop6: detected capacity change from 0 to 2048 [ 517.301117][ T44] hid-generic 0000:0D16:0000.0004: unknown main item tag 0x0 [ 517.309524][ T44] hid-generic 0000:0D16:0000.0004: unknown main item tag 0x0 [ 517.532671][ T9597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.558536][ T44] hid-generic 0000:0D16:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 517.821120][ T29] audit: type=1800 audit(1733398028.326:654): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1238" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 518.247817][ T9625] loop2: detected capacity change from 0 to 256 [ 518.352120][ T9026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.383421][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.874332][ T9627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1249'. [ 518.884019][ T9627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1249'. [ 520.949773][ T9667] loop3: detected capacity change from 0 to 1024 [ 520.959073][ T9667] EXT4-fs: Ignoring removed orlov option [ 520.965079][ T9667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 521.097458][ T9671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1262'. [ 521.237603][ T9667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.988457][ T9684] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1266'. [ 522.347386][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.227997][ T9708] program syz.3.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.655619][ T9710] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1275'. [ 524.014619][ T9719] usb usb5: usbfs: process 9719 (syz.2.1278) did not claim interface 0 before use [ 524.928389][ T9733] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1284'. [ 525.553735][ T9743] loop1: detected capacity change from 0 to 128 [ 527.683880][ T9769] loop1: detected capacity change from 0 to 512 [ 527.789828][ T9769] EXT4-fs: Ignoring removed nobh option [ 527.795698][ T9769] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.930024][ T9769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.106842][ T29] audit: type=1800 audit(1733398038.576:655): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 528.277279][ T9782] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1300'. [ 528.676421][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.086192][ T9796] loop1: detected capacity change from 0 to 128 [ 529.556328][ T9793] loop2: detected capacity change from 0 to 2048 [ 531.044555][ T9793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.236437][ T29] audit: type=1800 audit(1733398041.746:656): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1304" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 531.257255][ T29] audit: type=1800 audit(1733398041.746:657): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1304" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 532.490974][ T4916] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 532.505580][ T4916] EXT4-fs (loop2): This should not happen!! Data will be lost [ 532.505580][ T4916] [ 532.515626][ T4916] EXT4-fs (loop2): Total free blocks count 0 [ 532.522142][ T4916] EXT4-fs (loop2): Free/Dirty block details [ 532.528454][ T4916] EXT4-fs (loop2): free_blocks=0 [ 532.533632][ T4916] EXT4-fs (loop2): dirty_blocks=0 [ 532.539118][ T4916] EXT4-fs (loop2): Block reservation details [ 532.545331][ T4916] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 532.568596][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.750649][ T9834] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1313'. [ 533.390920][ T9847] loop3: detected capacity change from 0 to 512 [ 533.600469][ T9847] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.1318: casefold flag without casefold feature [ 533.601267][ T9847] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1318: couldn't read orphan inode 15 (err -117) [ 533.603696][ T9847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.293932][ T29] audit: type=1800 audit(1733398044.866:658): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1318" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 535.236466][ T9868] loop3: detected capacity change from 512 to 0 [ 535.541913][ T9876] loop2: detected capacity change from 0 to 512 [ 535.695644][ T9876] EXT4-fs: Ignoring removed nobh option [ 535.701754][ T9876] EXT4-fs: Ignoring removed mblk_io_submit option [ 536.257897][ T9876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.478848][ T29] audit: type=1800 audit(1733398046.996:659): pid=9876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1325" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 536.499497][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.669801][ T9886] 9pnet_fd: Insufficient options for proto=fd [ 537.130309][ T9894] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1328'. [ 537.175008][ T9888] loop1: detected capacity change from 0 to 2048 [ 537.405063][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.542991][ T5792] bio_check_eod: 2 callbacks suppressed [ 537.543066][ T5792] syz-executor: attempt to access beyond end of device [ 537.543066][ T5792] loop3: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 537.563065][ T5792] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 537.750924][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.750924][ T3597] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 537.765408][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.765408][ T3597] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 537.786681][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.786681][ T3597] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 537.802438][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.802438][ T3597] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 537.816510][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.816510][ T3597] loop3: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 537.830369][ T3597] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4558: inode #2: block 5: comm kworker/u8:11: unable to read itable block [ 537.844670][ T3597] kworker/u8:11: attempt to access beyond end of device [ 537.844670][ T3597] loop3: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 537.859003][ T3597] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 537.867681][ T3597] EXT4-fs (loop3): I/O error while writing superblock [ 538.035362][ T9888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.161409][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.194856][ T5792] syz-executor: attempt to access beyond end of device [ 538.194856][ T5792] loop3: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 538.209002][ T5792] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 538.218170][ T5792] EXT4-fs (loop3): I/O error while writing superblock [ 538.323672][ T29] audit: type=1800 audit(1733398048.866:660): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1327" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 538.344597][ T29] audit: type=1800 audit(1733398048.876:661): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1327" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 538.401956][ T29] audit: type=1326 audit(1733398048.946:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.425065][ T29] audit: type=1326 audit(1733398048.976:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.447968][ T29] audit: type=1326 audit(1733398048.976:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.470413][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.477081][ T29] audit: type=1326 audit(1733398048.976:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.499534][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.512405][ T29] audit: type=1326 audit(1733398048.986:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.534846][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.559933][ T29] audit: type=1326 audit(1733398049.136:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.6.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0297ff19 code=0x7ffc0000 [ 538.582559][ C1] vkms_vblank_simulate: vblank timer overrun [ 539.300819][ T9915] sd 0:0:1:0: device reset [ 539.321072][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.059702][ T9935] loop2: detected capacity change from 0 to 512 [ 541.239740][ T9941] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1342'. [ 541.273850][ T9939] loop1: detected capacity change from 0 to 512 [ 541.495634][ T9939] EXT4-fs: Ignoring removed nobh option [ 541.501826][ T9939] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.527753][ T9935] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1341: casefold flag without casefold feature [ 541.626280][ T9935] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1341: couldn't read orphan inode 15 (err -117) [ 541.686097][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.742963][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.776575][ T9935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.787636][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.803824][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.816003][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 541.825404][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.904801][ T9939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.260423][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 542.260506][ T29] audit: type=1800 audit(1733398052.596:701): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1340" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 542.397828][ T29] audit: type=1800 audit(1733398052.876:702): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1341" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 542.837420][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.933256][ T9935] loop2: detected capacity change from 512 to 0 [ 542.985024][ T9957] syz.2.1341: attempt to access beyond end of device [ 542.985024][ T9957] loop2: rw=2051, sector=510, nr_sectors = 2 limit=0 [ 543.005434][ T9957] EXT4-fs (loop2): discard request in group:0 block:254 count:1 failed with -5 [ 543.017905][ T9957] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: IO failure [ 543.026493][ T9957] syz.2.1341: attempt to access beyond end of device [ 543.026493][ T9957] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 543.040061][ T9957] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 543.048801][ T9957] EXT4-fs (loop2): I/O error while writing superblock [ 543.055934][ T9957] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz.2.1341: Error while async write back metadata [ 543.070198][ T9957] syz.2.1341: attempt to access beyond end of device [ 543.070198][ T9957] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 543.083708][ T9957] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 543.092335][ T9957] EXT4-fs (loop2): I/O error while writing superblock [ 543.250415][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 543.516193][ T29] audit: type=1326 audit(1733398054.066:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.540430][ T29] audit: type=1326 audit(1733398054.066:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.563265][ T29] audit: type=1326 audit(1733398054.086:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.586187][ T29] audit: type=1326 audit(1733398054.086:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.613162][ T29] audit: type=1326 audit(1733398054.086:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.637875][ T29] audit: type=1326 audit(1733398054.086:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.669862][ T29] audit: type=1326 audit(1733398054.236:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.692729][ T29] audit: type=1326 audit(1733398054.236:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f1b37ff19 code=0x7ffc0000 [ 543.857790][ T5794] Bluetooth: hci2: command tx timeout [ 545.428128][ T9995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'. [ 545.437635][ T9995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1352'. [ 545.600439][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.608819][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.619142][ T9944] bridge_slave_0: entered allmulticast mode [ 545.633934][ T9944] bridge_slave_0: entered promiscuous mode [ 545.648680][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.661842][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.669937][ T9944] bridge_slave_1: entered allmulticast mode [ 545.679246][ T9944] bridge_slave_1: entered promiscuous mode [ 545.968694][ T5794] Bluetooth: hci2: command tx timeout [ 546.029341][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.053862][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.238790][ T9944] team0: Port device team_slave_0 added [ 546.312274][ T9944] team0: Port device team_slave_1 added [ 546.640641][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.647917][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.674469][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.802571][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.809947][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.839474][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.941830][T10010] loop1: detected capacity change from 0 to 512 [ 546.959690][T10010] EXT4-fs: Ignoring removed nobh option [ 546.965563][T10010] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.569131][T10010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.636134][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 547.636213][ T29] audit: type=1800 audit(1733398058.206:749): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1356" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 547.676837][T10020] sd 0:0:1:0: device reset [ 547.790184][ T9944] hsr_slave_0: entered promiscuous mode [ 547.898915][ T9944] hsr_slave_1: entered promiscuous mode [ 547.981018][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.989684][ T9944] Cannot create hsr debugfs directory [ 548.065941][ T5794] Bluetooth: hci2: command tx timeout [ 548.846665][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.498179][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1365'. [ 549.508433][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1365'. [ 549.574033][ T5785] syz-executor: attempt to access beyond end of device [ 549.574033][ T5785] loop2: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 549.588086][ T5785] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 549.655445][ T9944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 549.689196][ T9944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 549.858385][ T9944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 549.899405][ T9944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 550.097253][ T5794] Bluetooth: hci2: command tx timeout [ 550.131968][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.131968][ T3728] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 550.147010][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.147010][ T3728] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 550.166674][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.166674][ T3728] loop2: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 550.182738][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.182738][ T3728] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 550.196774][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.196774][ T3728] loop2: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 550.210717][ T3728] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4558: inode #2: block 5: comm kworker/u8:15: unable to read itable block [ 550.224906][ T3728] kworker/u8:15: attempt to access beyond end of device [ 550.224906][ T3728] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 550.238682][ T3728] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 550.247268][ T3728] EXT4-fs (loop2): I/O error while writing superblock [ 550.820860][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.859077][ T5785] syz-executor: attempt to access beyond end of device [ 550.859077][ T5785] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 550.873129][ T5785] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 550.886429][ T5785] EXT4-fs (loop2): I/O error while writing superblock [ 551.154948][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.323548][ T3597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.527377][ T3597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.591822][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.789616][ T3597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.982630][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.990628][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.530576][ T3597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.698421][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.706251][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.898127][ T9944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 552.909815][ T9944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 552.941004][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.960063][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 553.008949][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 553.081101][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 553.098294][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 553.240277][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 553.384146][ T3597] macvlan1: left allmulticast mode [ 553.389863][ T3597] veth1_vlan: left allmulticast mode [ 553.395392][ T3597] macvlan1: left promiscuous mode [ 553.402488][ T3597] bridge0: port 3(macvlan1) entered disabled state [ 553.504017][T10080] loop6: detected capacity change from 0 to 512 [ 553.607364][ T3597] bridge_slave_1: left allmulticast mode [ 553.613278][ T3597] bridge_slave_1: left promiscuous mode [ 553.620634][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.747804][ T3597] bridge_slave_0: left allmulticast mode [ 553.754816][ T3597] bridge_slave_0: left promiscuous mode [ 553.761544][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.923061][T10080] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.1376: casefold flag without casefold feature [ 553.973018][T10080] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1376: couldn't read orphan inode 15 (err -117) [ 554.061339][T10080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.117543][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 554.127158][T10087] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1378'. [ 554.417950][ T29] audit: type=1800 audit(1733398064.986:750): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1376" name="file1" dev="loop6" ino=19 res=0 errno=0 [ 554.478839][ T3597] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.551934][ T3597] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.603738][ T3597] @ (unregistering): Released all slaves [ 554.681567][T10096] loop6: detected capacity change from 512 to 0 [ 554.700306][T10099] syz.6.1376: attempt to access beyond end of device [ 554.700306][T10099] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 554.714680][T10099] syz.6.1376: attempt to access beyond end of device [ 554.714680][T10099] loop6: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 554.728734][T10099] syz.6.1376: attempt to access beyond end of device [ 554.728734][T10099] loop6: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 554.743481][T10099] syz.6.1376: attempt to access beyond end of device [ 554.743481][T10099] loop6: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 554.757373][T10099] syz.6.1376: attempt to access beyond end of device [ 554.757373][T10099] loop6: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 554.777236][T10099] syz.6.1376: attempt to access beyond end of device [ 554.777236][T10099] loop6: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 554.793400][T10099] syz.6.1376: attempt to access beyond end of device [ 554.793400][T10099] loop6: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 554.807190][T10099] syz.6.1376: attempt to access beyond end of device [ 554.807190][T10099] loop6: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 554.822859][T10099] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.1376: unable to read itable block [ 554.836087][T10099] syz.6.1376: attempt to access beyond end of device [ 554.836087][T10099] loop6: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 554.849628][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 554.858267][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 554.865291][T10099] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 554.879529][T10099] syz.6.1376: attempt to access beyond end of device [ 554.879529][T10099] loop6: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 554.894789][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 554.903428][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 554.910569][T10099] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.1376: mark_inode_dirty error [ 554.922355][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 554.931055][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 554.938637][T10099] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.1376: unable to read itable block [ 554.952145][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 554.960787][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 554.967921][T10099] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 554.985364][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 554.995897][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 555.002919][T10099] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.1376: mark_inode_dirty error [ 555.014717][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.023340][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 555.371269][ T3597] IPVS: stopping master sync thread 7415 ... [ 555.467519][T10099] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1376: Error while async write back metadata [ 555.480731][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.493734][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 555.502141][T10099] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.1376: Error while async write back metadata [ 555.515225][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.523913][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 555.531712][T10099] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.1376: unable to read itable block [ 555.545042][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.553716][T10099] EXT4-fs (loop6): I/O error while writing superblock [ 555.561031][T10099] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 555.570211][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.578939][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.593173][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.601944][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.610994][T10099] Buffer I/O error on dev loop6, logical block 255, lost sync page write [ 555.621114][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.629907][T10099] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 555.630611][ T5794] Bluetooth: hci0: command tx timeout [ 556.199878][T10117] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1381'. [ 556.762528][T10121] 9pnet_fd: Insufficient options for proto=fd [ 557.259882][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.698417][ T5794] Bluetooth: hci0: command tx timeout [ 557.778346][ T9026] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 558.102831][ T3597] hsr_slave_0: left promiscuous mode [ 558.181976][ T3597] hsr_slave_1: left promiscuous mode [ 558.276032][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.283955][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.380433][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.389679][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.527167][ T3597] veth1_macvtap: left promiscuous mode [ 558.532956][ T3597] veth0_macvtap: left promiscuous mode [ 558.539102][ T3597] veth1_vlan: left promiscuous mode [ 558.544585][ T3597] veth0_vlan: left promiscuous mode [ 559.807135][ T5794] Bluetooth: hci0: command tx timeout [ 559.848679][ T3597] team0 (unregistering): Port device team_slave_1 removed [ 559.934413][ T3597] team0 (unregistering): Port device team_slave_0 removed [ 560.685630][T10146] loop1: detected capacity change from 0 to 512 [ 560.897313][T10146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.910720][T10146] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.296780][T10071] chnl_net:caif_netlink_parms(): no params data found [ 561.864870][ T5794] Bluetooth: hci0: command tx timeout [ 561.988839][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.025602][ T3597] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.150988][ T3597] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.374529][ T3597] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.523335][ T3597] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.017457][ T3597] bridge_slave_1: left allmulticast mode [ 563.023369][ T3597] bridge_slave_1: left promiscuous mode [ 563.030401][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.080197][ T3597] bridge_slave_0: left allmulticast mode [ 563.086472][ T3597] bridge_slave_0: left promiscuous mode [ 563.093066][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.737830][ T3597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.792381][ T3597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.844234][ T3597] bond0 (unregistering): Released all slaves [ 564.070854][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.250844][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.258836][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.266795][T10071] bridge_slave_0: entered allmulticast mode [ 564.277727][T10071] bridge_slave_0: entered promiscuous mode [ 564.295270][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.303548][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.311551][T10071] bridge_slave_1: entered allmulticast mode [ 564.320687][T10071] bridge_slave_1: entered promiscuous mode [ 564.358248][ T5791] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.441582][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.502639][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.530969][ T5787] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.542588][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.654301][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.832649][ T9944] veth0_vlan: entered promiscuous mode [ 564.849310][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.354990][T10071] team0: Port device team_slave_0 added [ 565.391938][ T9944] veth1_vlan: entered promiscuous mode [ 565.645176][ T3597] hsr_slave_0: left promiscuous mode [ 565.665083][ T3597] hsr_slave_1: left promiscuous mode [ 565.695176][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.703205][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.747890][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.755627][ T3597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.787073][ T3597] veth1_macvtap: left promiscuous mode [ 565.792862][ T3597] veth0_macvtap: left promiscuous mode [ 565.798902][ T3597] veth1_vlan: left promiscuous mode [ 565.804380][ T3597] veth0_vlan: left promiscuous mode [ 566.484775][ T3597] team0 (unregistering): Port device team_slave_1 removed [ 566.509454][ T3597] team0 (unregistering): Port device team_slave_0 removed [ 566.707897][ T5794] Bluetooth: hci4: command tx timeout [ 566.724260][T10071] team0: Port device team_slave_1 added [ 567.198081][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.237930][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.248261][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.313888][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.332106][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.332117][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 567.347746][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.375586][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.396524][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.398524][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.403619][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.437832][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.770166][T10071] hsr_slave_0: entered promiscuous mode [ 567.793125][T10071] hsr_slave_1: entered promiscuous mode [ 567.824307][T10071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.832318][T10071] Cannot create hsr debugfs directory [ 567.903746][ T9944] veth0_macvtap: entered promiscuous mode [ 568.224828][T10209] 9pnet_fd: Insufficient options for proto=fd [ 568.268590][ T9944] veth1_macvtap: entered promiscuous mode [ 568.374888][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.385700][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.400628][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.412906][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.423906][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.434857][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.449395][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.567379][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.579019][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.591532][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.607019][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.618721][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.629535][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.643887][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.738832][ T5794] Bluetooth: hci4: command tx timeout [ 568.741239][ T9944] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.753545][ T9944] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.762689][ T9944] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.772345][ T9944] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.268150][T10071] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 569.289457][T10071] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 569.313906][T10071] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 569.428900][T10179] chnl_net:caif_netlink_parms(): no params data found [ 569.483259][T10071] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 569.655148][ T5794] Bluetooth: hci1: command tx timeout [ 569.798332][T10200] chnl_net:caif_netlink_parms(): no params data found [ 570.827873][ T5794] Bluetooth: hci4: command tx timeout [ 571.044487][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.054154][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.062239][T10179] bridge_slave_0: entered allmulticast mode [ 571.071711][T10179] bridge_slave_0: entered promiscuous mode [ 571.130282][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.143513][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.153722][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.161939][T10179] bridge_slave_1: entered allmulticast mode [ 571.171231][T10179] bridge_slave_1: entered promiscuous mode [ 571.508441][T10200] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.518298][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.526428][T10200] bridge_slave_0: entered allmulticast mode [ 571.535693][T10200] bridge_slave_0: entered promiscuous mode [ 571.680039][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.709204][T10200] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.719288][T10200] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.729511][T10200] bridge_slave_1: entered allmulticast mode [ 571.738659][ T5794] Bluetooth: hci1: command tx timeout [ 571.740461][T10200] bridge_slave_1: entered promiscuous mode [ 571.863079][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.882683][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.133387][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.141136][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.175216][T10200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.277475][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.285173][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.341530][T10200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.408750][T10179] team0: Port device team_slave_0 added [ 572.514922][T10179] team0: Port device team_slave_1 added [ 572.897376][ T5794] Bluetooth: hci4: command tx timeout [ 572.928582][T10259] 9pnet_fd: Insufficient options for proto=fd [ 573.120048][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.127646][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.154910][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.184278][T10200] team0: Port device team_slave_0 added [ 573.269590][T10200] team0: Port device team_slave_1 added [ 573.489016][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.496411][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.528079][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.705146][T10200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.713421][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.740330][T10200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.774778][T10200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.782381][T10200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.809796][T10200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.826887][ T5794] Bluetooth: hci1: command tx timeout [ 574.214021][T10179] hsr_slave_0: entered promiscuous mode [ 574.263510][T10179] hsr_slave_1: entered promiscuous mode [ 574.287353][T10179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.295167][T10179] Cannot create hsr debugfs directory [ 574.649159][T10200] hsr_slave_0: entered promiscuous mode [ 574.717119][T10200] hsr_slave_1: entered promiscuous mode [ 574.757372][T10200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.765201][T10200] Cannot create hsr debugfs directory [ 575.309810][ T3569] ===================================================== [ 575.318109][ T3569] BUG: KMSAN: uninit-value in nci_ntf_packet+0x1a36/0x3ce0 [ 575.325523][ T3569] nci_ntf_packet+0x1a36/0x3ce0 [ 575.331215][ T3569] nci_rx_work+0x408/0x6f0 [ 575.335949][ T3569] process_scheduled_works+0xae0/0x1c40 [ 575.341733][ T3569] worker_thread+0xea7/0x14f0 [ 575.346733][ T3569] kthread+0x3e2/0x540 [ 575.354795][ T3569] ret_from_fork+0x6d/0x90 [ 575.361136][ T3569] ret_from_fork_asm+0x1a/0x30 [ 575.366301][ T3569] [ 575.368734][ T3569] Uninit was created at: [ 575.373263][ T3569] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 575.379582][ T3569] kmalloc_reserve+0x13d/0x4a0 [ 575.384531][ T3569] __alloc_skb+0x363/0x7b0 [ 575.389260][ T3569] virtual_ncidev_write+0x67/0x380 [ 575.394605][ T3569] vfs_write+0x48a/0x1540 [ 575.399305][ T3569] ksys_write+0x240/0x4b0 [ 575.403977][ T3569] __x64_sys_write+0x93/0xe0 [ 575.408937][ T3569] x64_sys_call+0x3161/0x3c30 [ 575.413849][ T3569] do_syscall_64+0xcd/0x1e0 [ 575.418678][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.424805][ T3569] [ 575.427336][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:10 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 575.438592][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.448986][ T3569] Workqueue: nfc2_nci_rx_wq nci_rx_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 575.458786][ T3569] ===================================================== [ 575.468533][ T3569] Disabling lock debugging due to kernel taint [ 575.474845][ T3569] Kernel panic - not syncing: kmsan.panic set ... [ 575.481425][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: kworker/u8:10 Tainted: G B 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 575.494084][ T3569] Tainted: [B]=BAD_PAGE [ 575.498367][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 575.508659][ T3569] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 575.514470][ T3569] Call Trace: [ 575.517883][ T3569] [ 575.520933][ T3569] dump_stack_lvl+0x216/0x2d0 [ 575.525832][ T3569] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 575.531868][ T3569] dump_stack+0x1e/0x24 [ 575.536246][ T3569] panic+0x4e2/0xcf0 [ 575.540350][ T3569] ? kmsan_get_metadata+0xd1/0x1c0 [ 575.545662][ T3569] kmsan_report+0x2c7/0x2d0 [ 575.550341][ T3569] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 575.556373][ T3569] ? __msan_warning+0x95/0x120 [ 575.561349][ T3569] ? nci_ntf_packet+0x1a36/0x3ce0 [ 575.566551][ T3569] ? nci_rx_work+0x408/0x6f0 [ 575.571343][ T3569] ? process_scheduled_works+0xae0/0x1c40 [ 575.577280][ T3569] ? worker_thread+0xea7/0x14f0 [ 575.582342][ T3569] ? kthread+0x3e2/0x540 [ 575.586746][ T3569] ? ret_from_fork+0x6d/0x90 [ 575.591525][ T3569] ? ret_from_fork_asm+0x1a/0x30 [ 575.596686][ T3569] ? ret_from_fork_asm+0x1a/0x30 [ 575.601841][ T3569] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 575.607832][ T3569] ? kmsan_get_metadata+0x13e/0x1c0 [ 575.613198][ T3569] ? kmsan_get_metadata+0x13e/0x1c0 [ 575.618563][ T3569] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 575.625117][ T3569] ? kmsan_get_metadata+0x13e/0x1c0 [ 575.630627][ T3569] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 575.636708][ T3569] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 575.642802][ T3569] ? kmsan_get_metadata+0x13e/0x1c0 [ 575.648170][ T3569] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 575.654721][ T3569] ? kmsan_get_metadata+0x13e/0x1c0 [ 575.660099][ T3569] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 575.666089][ T3569] __msan_warning+0x95/0x120 [ 575.670889][ T3569] nci_ntf_packet+0x1a36/0x3ce0 [ 575.675922][ T3569] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 575.682475][ T3569] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 575.688777][ T3569] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 575.694775][ T3569] nci_rx_work+0x408/0x6f0 [ 575.699421][ T3569] ? __pfx_nci_rx_work+0x10/0x10 [ 575.704568][ T3569] process_scheduled_works+0xae0/0x1c40 [ 575.710371][ T3569] worker_thread+0xea7/0x14f0 [ 575.715281][ T3569] kthread+0x3e2/0x540 [ 575.719513][ T3569] ? __pfx_worker_thread+0x10/0x10 [ 575.724849][ T3569] ? __pfx_kthread+0x10/0x10 [ 575.729626][ T3569] ret_from_fork+0x6d/0x90 [ 575.734217][ T3569] ? __pfx_kthread+0x10/0x10 [ 575.738968][ T3569] ret_from_fork_asm+0x1a/0x30 [ 575.743959][ T3569] [ 575.747376][ T3569] Kernel Offset: disabled [ 575.751773][ T3569] Rebooting in 86400 seconds..