last executing test programs: 1m45.145346712s ago: executing program 0 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000003200)='./file0\x00', 0x904624, &(0x7f0000003240)=ANY=[], 0x3, 0x332, &(0x7f0000001300)="$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") io_setup(0x7, &(0x7f0000000100)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 1m40.464398044s ago: executing program 0 (id=322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) sendfile(r1, r1, &(0x7f00000000c0), 0xffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1m38.951114447s ago: executing program 0 (id=329): r0 = syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0x4c}, 0x0, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000000000000000b50000000f004083c5000000a0000a4095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='io_uring_register\x00', r1}, 0x2a) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000940)={0x1, 0x1, 0x0, &(0x7f0000000880)=[{0x0}], 0x0}, 0x20) 1m38.169259346s ago: executing program 0 (id=333): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x3, 0x3a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000150001002bbd7000fedbdf250a4028fd", @ANYRES32=0x0, @ANYBLOB="08000a0000000000140002"], 0x44}}, 0x0) setsockopt$inet6_int(r9, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1e) 1m32.50395784s ago: executing program 0 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1m32.466331108s ago: executing program 1 (id=349): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000580), 0x0, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m31.873512503s ago: executing program 1 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.752925431s ago: executing program 0 (id=352): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) 1m29.040450674s ago: executing program 32 (id=352): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r2, 0x1) 1m28.949917759s ago: executing program 1 (id=354): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 1m28.211257175s ago: executing program 1 (id=358): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 1m21.562651524s ago: executing program 1 (id=370): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000005c0)}) lsm_get_self_attr(0x67, &(0x7f0000001500)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000080)=0x1020, 0x0) 1m19.909238749s ago: executing program 1 (id=376): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 1m19.276183196s ago: executing program 33 (id=376): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 19.586849165s ago: executing program 4 (id=563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 18.483528659s ago: executing program 4 (id=567): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000084"], 0x18}], 0x1, 0x0) 17.608480154s ago: executing program 4 (id=573): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000b80)}], 0x1, 0x6, 0x0, 0x8) 16.517458665s ago: executing program 4 (id=577): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 13.260614486s ago: executing program 5 (id=597): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00'}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 12.748997718s ago: executing program 5 (id=599): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000a00)="$eJzs3M9LG2kYwPEnP4xJRONh2WUXFl92L7uXQbN7XgyLQmmgYk3pDyiMOmlDpolkgiWlVAuFXkv/iB7Eozeh9R/w0lt76aU3L4Ue6qF0SiYziSaTWGN+2Pr9gMzDPO8zed+MkWeCMwfXn93LZy0tq5clGFUSEBE5FJmUoHgC7jboxBE5alP+Hvv45verN25eTqXTc4tKzaeW/kkqpSamXt5/GHOH7Y7K/uTtgw/J9/s/7/968GXpbs5SOUsVimWlq+Xiu7K+bBpqNWflNaUWTEO3DJUrWEapli/W8lmzuLZWUXphdTy+VjIsS+mFisobFVUuqnKpokJ39FxBaZqmxuOCk2S2Fhf1VJfFKz2eDPqkVErpIRGJtWQyW0OZEAAAGKrm/j8oqpf9//Yfe+WxazsTbv+/G/Hr//99WzvWsf4/KiK+/b/3+r79v366/r+1I7pYztT/43yYirTsCjTCarKU0uPu59fx+Nb2tBPQ/wMAAAAAAAAAAAAAAAAAAAAA8D04tO2EbdsJdxt2dydGRSQqIrabbym0azYGPmP0UtP5r//Uz79sDnuK6KPGjXvhCRHz6XpmPVPbugP2RMQUQ6YlIZ/rH3vbtquxd+eRqpqUV+aGW7+xngk5mVRWck79jCRGpLnetucvpedmVM3x+hGJH61PSkJ+8q9P+tZH5K8/j9RrkpDXK1IUU1adeTTqH80o9f+VdFN9zBkHAAAAAMCPQFN1vtfvmtYuX6uvX183fz8QalxfT/ten4flt/Bw1w4AAAAAwEVhVR7kddM0Sh2CmJw8pvsg3Kcjeyv81irvfxn6t9IOgffix1JRd2fP35bAKd6WNkFQuqmaqq5GnXUV3tdG7cbIwuzgz6AT/PL8xafeHfC/negJK+0+CHX+BRgZ2B8gAAAAAAPTaPq9PbPDnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdQ+yeEPWl+HJ1f4D2grOMjx4a8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+BoAAP//Mjf9DA==") r3 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x110) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x60}], 0x1, 0x7000, 0xfffffffc, 0x0) r5 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) sendfile(r3, r5, 0x0, 0x1000000201005) 12.088905213s ago: executing program 4 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="90000000000201040000000b000000000a000000040001803c0003800c00028005ec0000010000002c00018014000300fc00000017e2fe61000000000000000014000400fe800000000988cba9b4db93060000bb3c0002800c00028005000100000000002c00018014000300fe8000"/120], 0x90}}, 0x0) 11.818644772s ago: executing program 5 (id=604): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.201127123s ago: executing program 4 (id=606): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) 10.08187677s ago: executing program 34 (id=606): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) 10.013653107s ago: executing program 5 (id=611): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 8.42649409s ago: executing program 6 (id=617): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) 8.017679136s ago: executing program 6 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(0xffffffffffffffff) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.904198497s ago: executing program 5 (id=621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB], 0x68}}, 0x0) 7.108048561s ago: executing program 6 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.89808101s ago: executing program 5 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="90000000000201040000000b000000000a000000040001803c0003800c00028005ec0000010000002c00018014000300fc00000017e2fe61000000000000000014000400fe800000000988cba9b4db93060000bb3c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb"], 0x90}}, 0x0) 5.884705997s ago: executing program 35 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="90000000000201040000000b000000000a000000040001803c0003800c00028005ec0000010000002c00018014000300fc00000017e2fe61000000000000000014000400fe800000000988cba9b4db93060000bb3c0002800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb"], 0x90}}, 0x0) 5.658543452s ago: executing program 6 (id=630): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 4.73908923s ago: executing program 3 (id=633): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.005502579s ago: executing program 3 (id=634): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.936631963s ago: executing program 2 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 3.631135757s ago: executing program 2 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000015"], 0x68}}, 0x0) 2.873674561s ago: executing program 2 (id=637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 2.849987373s ago: executing program 6 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.553581102s ago: executing program 3 (id=639): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setpriority(0x2, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcc0984f9ead32b32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.872027183s ago: executing program 2 (id=640): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000005c0), 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c90020008000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/128]) 1.327687807s ago: executing program 3 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 1.256373734s ago: executing program 2 (id=642): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 848.976827ms ago: executing program 3 (id=643): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x6, 0x22, [0xff, 0xffffffff, 0xffffff00, 0xff000000]}]}}]}, 0x5c}}, 0x1000000) 761.370501ms ago: executing program 6 (id=644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000005c0)=ANY=[], 0x1, 0x27c, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 81.870093ms ago: executing program 36 (id=644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x5008000, &(0x7f00000005c0)=ANY=[], 0x1, 0x27c, &(0x7f0000000200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.539823ms ago: executing program 2 (id=646): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) 0s ago: executing program 3 (id=647): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1, 0x0, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): ss (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.226580][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.236824][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.247625][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.257872][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.268751][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.279011][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.289828][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.308789][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.573625][ T5780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.582904][ T5780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.592084][ T5780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.601419][ T5780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.964222][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.973314][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.094077][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.103143][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.217311][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.225525][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.312785][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.321039][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.607924][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 236.768565][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.776780][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.964332][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.985036][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.160052][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.169124][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.234660][ T5963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 237.415078][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.424306][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.808932][ T29] audit: type=1326 audit(1733396367.857:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 237.832163][ T29] audit: type=1326 audit(1733396367.857:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 237.854685][ T29] audit: type=1326 audit(1733396367.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 237.877020][ T29] audit: type=1326 audit(1733396367.867:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 237.901844][ T29] audit: type=1326 audit(1733396367.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 237.924970][ T29] audit: type=1326 audit(1733396367.867:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 238.236226][ T5971] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.323136][ T29] audit: type=1326 audit(1733396368.177:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 238.345736][ T29] audit: type=1326 audit(1733396368.177:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 238.345948][ T29] audit: type=1326 audit(1733396368.177:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 238.346162][ T29] audit: type=1326 audit(1733396368.177:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5969 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 238.463361][ T5974] Zero length message leads to an empty skb [ 238.781704][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.781798][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.859897][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.859994][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.671580][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 240.341774][ T5997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12'. [ 241.015030][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 242.557355][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 243.094358][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 243.094436][ T29] audit: type=1326 audit(1733396373.147:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.214606][ T29] audit: type=1326 audit(1733396373.207:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.241219][ T29] audit: type=1326 audit(1733396373.207:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.265399][ T29] audit: type=1326 audit(1733396373.207:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.287904][ T29] audit: type=1326 audit(1733396373.217:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.312340][ T29] audit: type=1326 audit(1733396373.227:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.339657][ T29] audit: type=1326 audit(1733396373.257:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.364769][ T29] audit: type=1326 audit(1733396373.257:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.402076][ T29] audit: type=1326 audit(1733396373.257:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.427283][ T29] audit: type=1326 audit(1733396373.267:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 243.992020][ T6040] netlink: 64 bytes leftover after parsing attributes in process `syz.0.28'. [ 244.409805][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.30'. [ 245.622789][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 247.074181][ T6079] netlink: 64 bytes leftover after parsing attributes in process `syz.4.41'. [ 247.303881][ T6084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.45'. [ 247.960647][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'. [ 248.591762][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 248.591836][ T29] audit: type=1326 audit(1733396378.657:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.621338][ T29] audit: type=1326 audit(1733396378.657:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.643883][ T29] audit: type=1326 audit(1733396378.687:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.670144][ T29] audit: type=1326 audit(1733396378.687:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.694021][ T29] audit: type=1326 audit(1733396378.687:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.716538][ T29] audit: type=1326 audit(1733396378.687:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 248.739827][ T29] audit: type=1326 audit(1733396378.717:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 249.229096][ T29] audit: type=1326 audit(1733396379.047:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bde9b27c5 code=0x7ffc0000 [ 249.252143][ T29] audit: type=1326 audit(1733396379.067:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 249.278627][ T29] audit: type=1326 audit(1733396379.067:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.4.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 250.051215][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.56'. [ 250.632361][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 251.528320][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 253.301669][ T6143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.69'. [ 254.247407][ T6155] loop1: detected capacity change from 0 to 512 [ 254.313380][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 254.467460][ T6158] loop2: detected capacity change from 0 to 1024 [ 254.631818][ T6158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.702239][ T6155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.715988][ T6155] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.775048][ T6158] EXT4-fs (loop2): shut down requested (0) [ 255.133147][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.204049][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.621865][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 255.621945][ T29] audit: type=1326 audit(1733396385.587:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.622155][ T29] audit: type=1326 audit(1733396385.587:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.622359][ T29] audit: type=1326 audit(1733396385.597:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.622564][ T29] audit: type=1326 audit(1733396385.597:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.622770][ T29] audit: type=1326 audit(1733396385.607:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.622983][ T29] audit: type=1326 audit(1733396385.607:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.623187][ T29] audit: type=1326 audit(1733396385.607:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.623390][ T29] audit: type=1326 audit(1733396385.617:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.623592][ T29] audit: type=1326 audit(1733396385.617:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.623793][ T29] audit: type=1326 audit(1733396385.617:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 255.667400][ T6172] loop4: detected capacity change from 0 to 128 [ 256.151284][ T6172] program syz.4.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.963568][ T6183] netlink: 64 bytes leftover after parsing attributes in process `syz.2.84'. [ 257.430345][ T6189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 257.639823][ T6192] loop2: detected capacity change from 0 to 1024 [ 257.660763][ T6194] loop4: detected capacity change from 0 to 512 [ 257.752850][ T6192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.787569][ T6192] EXT4-fs (loop2): shut down requested (0) [ 257.828423][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.842397][ T6194] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.057400][ T6194] syz.4.89 (6194) used greatest stack depth: 5296 bytes left [ 258.314153][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.757607][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.884043][ T6219] netlink: 64 bytes leftover after parsing attributes in process `syz.1.98'. [ 260.243381][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 260.687242][ T6233] loop3: detected capacity change from 0 to 512 [ 260.725370][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 260.725450][ T29] audit: type=1326 audit(1733396390.787:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 260.850077][ T6231] loop4: detected capacity change from 0 to 1024 [ 260.867564][ T29] audit: type=1326 audit(1733396390.857:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 261.101807][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.115076][ T6233] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.152193][ T6231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.695283][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.798155][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.243621][ T6257] netlink: 64 bytes leftover after parsing attributes in process `syz.3.110'. [ 262.465912][ T6262] loop3: detected capacity change from 0 to 764 [ 262.958840][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.115'. [ 263.062280][ T29] audit: type=1326 audit(1733396393.117:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.160915][ T29] audit: type=1326 audit(1733396393.157:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.184072][ T29] audit: type=1326 audit(1733396393.157:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.212958][ T29] audit: type=1326 audit(1733396393.167:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.236432][ T29] audit: type=1326 audit(1733396393.177:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.259076][ T29] audit: type=1326 audit(1733396393.197:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.282052][ T29] audit: type=1326 audit(1733396393.197:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 263.308888][ T29] audit: type=1326 audit(1733396393.207:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.4.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 264.287941][ T6279] loop3: detected capacity change from 0 to 512 [ 264.475161][ T6281] loop1: detected capacity change from 0 to 1024 [ 264.495736][ T6279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.509043][ T6279] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.624610][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 264.919907][ T6281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.121015][ T6289] netlink: 64 bytes leftover after parsing attributes in process `syz.4.123'. [ 265.283825][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.363675][ T6293] loop2: detected capacity change from 0 to 512 [ 265.418195][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.716052][ T6293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.729596][ T6293] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.364040][ T6311] netlink: 'syz.4.133': attribute type 3 has an invalid length. [ 266.519687][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.856059][ T6317] loop3: detected capacity change from 0 to 512 [ 267.035681][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.049873][ T6317] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.180109][ T6319] loop0: detected capacity change from 0 to 1024 [ 267.419549][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 267.419625][ T29] audit: type=1326 audit(1733396397.477:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.468297][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.470906][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.490764][ T29] audit: type=1326 audit(1733396397.517:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.517555][ T29] audit: type=1326 audit(1733396397.517:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.541592][ T29] audit: type=1326 audit(1733396397.517:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.564186][ T29] audit: type=1326 audit(1733396397.547:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.587542][ T29] audit: type=1326 audit(1733396397.567:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.766691][ T29] audit: type=1326 audit(1733396397.807:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9d527b27c5 code=0x7ffc0000 [ 267.790544][ T29] audit: type=1326 audit(1733396397.807:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 267.816914][ T29] audit: type=1326 audit(1733396397.807:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 268.060604][ T29] audit: type=1326 audit(1733396397.947:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6322 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9d5277ff19 code=0x7ffc0000 [ 268.147975][ T6331] netlink: 64 bytes leftover after parsing attributes in process `syz.3.138'. [ 268.203882][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.550468][ T6344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 271.294029][ T6359] loop0: detected capacity change from 0 to 512 [ 271.955470][ T6367] netlink: 64 bytes leftover after parsing attributes in process `syz.2.151'. [ 272.441656][ T6359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.454932][ T6359] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.771678][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 272.771755][ T29] audit: type=1800 audit(1733396402.827:334): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.148" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 273.180010][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.524225][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 275.118153][ T6409] loop4: detected capacity change from 0 to 512 [ 275.619678][ T6409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.633240][ T6409] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.760729][ T6424] loop1: detected capacity change from 0 to 512 [ 275.799032][ T6424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 275.813732][ T6424] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 275.922582][ T6424] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.938868][ T6424] EXT4-fs (loop1): 1 truncate cleaned up [ 275.947275][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.132436][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.513217][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.562307][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.173'. [ 277.597574][ T29] audit: type=1326 audit(1733396407.657:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.620755][ T29] audit: type=1326 audit(1733396407.657:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.647335][ T29] audit: type=1326 audit(1733396407.657:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.671278][ T29] audit: type=1326 audit(1733396407.657:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.694011][ T29] audit: type=1326 audit(1733396407.657:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.716680][ T29] audit: type=1326 audit(1733396407.657:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.744575][ T29] audit: type=1326 audit(1733396407.657:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.767621][ T29] audit: type=1326 audit(1733396407.657:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.790446][ T29] audit: type=1326 audit(1733396407.707:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.790655][ T29] audit: type=1326 audit(1733396407.707:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.790864][ T29] audit: type=1326 audit(1733396407.707:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.791069][ T29] audit: type=1326 audit(1733396407.717:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.791274][ T29] audit: type=1326 audit(1733396407.717:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.791483][ T29] audit: type=1326 audit(1733396407.717:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.791681][ T29] audit: type=1326 audit(1733396407.717:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.791883][ T29] audit: type=1326 audit(1733396407.717:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.792079][ T29] audit: type=1326 audit(1733396407.717:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 277.792271][ T29] audit: type=1326 audit(1733396407.717:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbed537ff19 code=0x7ffc0000 [ 278.624047][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 279.132683][ T6459] loop1: detected capacity change from 0 to 512 [ 279.314123][ T6459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.327588][ T6459] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.531518][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 279.758482][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.515744][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.522761][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.000941][ T1528] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 281.210564][ T1528] usb 3-1: device descriptor read/64, error -71 [ 281.461526][ T1528] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 281.600671][ T1528] usb 3-1: device descriptor read/64, error -71 [ 281.722467][ T1528] usb usb3-port1: attempt power cycle [ 281.881183][ T6498] loop1: detected capacity change from 0 to 512 [ 281.881689][ T6495] IPVS: Error connecting to the multicast addr [ 282.007841][ T6498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.021989][ T6498] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.150635][ T1528] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 282.231878][ T1528] usb 3-1: device descriptor read/8, error -71 [ 282.480738][ T1528] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 282.561165][ T1528] usb 3-1: device descriptor read/8, error -71 [ 282.574807][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.672116][ T1528] usb usb3-port1: unable to enumerate USB device [ 283.926093][ T6526] loop1: detected capacity change from 0 to 512 [ 283.935151][ T6526] ======================================================= [ 283.935151][ T6526] WARNING: The mand mount option has been deprecated and [ 283.935151][ T6526] and is ignored by this kernel. Remove the mand [ 283.935151][ T6526] option from the mount to silence this warning. [ 283.935151][ T6526] ======================================================= [ 283.971298][ T6526] journal_path: Lookup failure for './file0' [ 283.977643][ T6526] EXT4-fs: error: could not find journal device path [ 285.022129][ T6535] IPVS: Error connecting to the multicast addr [ 285.959912][ T6539] loop0: detected capacity change from 0 to 512 [ 286.487375][ T6539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 286.500992][ T6539] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.546809][ T6552] loop4: detected capacity change from 0 to 512 [ 286.580593][ T6547] netlink: 64 bytes leftover after parsing attributes in process `syz.3.218'. [ 286.875004][ T6552] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 286.911864][ T6552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 286.973633][ T6552] __quota_error: 15 callbacks suppressed [ 286.973736][ T6552] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 286.989246][ T6552] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 286.999491][ T6552] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.219: Failed to acquire dquot type 1 [ 287.039343][ T6552] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.219: bg 0: block 40: padding at end of block bitmap is not set [ 287.081636][ T6552] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 287.113985][ T6552] EXT4-fs (loop4): 1 truncate cleaned up [ 287.186024][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 287.236397][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 287.387980][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.809580][ T6566] dccp_invalid_packet: P.Data Offset(224) too large [ 287.842264][ T29] audit: type=1326 audit(1733396417.807:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6567 comm="syz.4.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 288.008748][ T6572] syz.4.228[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.009159][ T6572] syz.4.228[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.022437][ T6572] syz.4.228[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.889884][ T6581] netlink: 64 bytes leftover after parsing attributes in process `syz.1.231'. [ 288.991728][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.232'. [ 289.301437][ T6589] loop2: detected capacity change from 0 to 512 [ 289.442527][ T6589] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 289.828275][ T6589] EXT4-fs (loop2): orphan cleanup on readonly fs [ 289.857579][ T6589] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 289.867093][ T6589] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 289.877537][ T6589] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.235: Failed to acquire dquot type 1 [ 289.914327][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.239'. [ 289.928530][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 289.939124][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.239'. [ 289.948466][ T6599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.239'. [ 289.984137][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 290.041428][ T6589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.235: bg 0: block 40: padding at end of block bitmap is not set [ 290.138584][ T6589] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 290.150697][ T6589] EXT4-fs (loop2): 1 truncate cleaned up [ 290.158419][ T6589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.532413][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.661152][ T6610] dccp_invalid_packet: P.Data Offset(224) too large [ 290.708308][ T6611] loop4: detected capacity change from 0 to 512 [ 290.881627][ T6614] netlink: 64 bytes leftover after parsing attributes in process `syz.0.246'. [ 291.168809][ T6611] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 291.179619][ T6611] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.232772][ T6611] EXT4-fs (loop4): mount failed [ 291.320080][ T6624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.247'. [ 292.531134][ T29] audit: type=1326 audit(1733396422.597:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.770510][ T29] audit: type=1326 audit(1733396422.717:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.798396][ T29] audit: type=1326 audit(1733396422.727:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.823373][ T29] audit: type=1326 audit(1733396422.737:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.847196][ T29] audit: type=1326 audit(1733396422.737:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.870530][ T29] audit: type=1326 audit(1733396422.787:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.896696][ T29] audit: type=1326 audit(1733396422.787:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.920711][ T29] audit: type=1326 audit(1733396422.797:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.943499][ T29] audit: type=1326 audit(1733396422.797:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 292.966203][ T29] audit: type=1326 audit(1733396422.797:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 293.230600][ T6644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.257'. [ 293.444126][ T6646] dccp_invalid_packet: P.Data Offset(224) too large [ 293.904196][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.260'. [ 294.248242][ T6659] loop1: detected capacity change from 0 to 512 [ 294.502073][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.515583][ T6659] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.886491][ T6670] loop3: detected capacity change from 0 to 128 [ 295.152070][ T6677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.271'. [ 295.411446][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'. [ 295.827616][ T6687] dccp_invalid_packet: P.Data Offset(224) too large [ 296.046561][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.505187][ T6690] loop1: detected capacity change from 0 to 164 [ 296.846449][ T6694] tipc: Started in network mode [ 296.851944][ T6694] tipc: Node identity c6262d4d0d27, cluster identity 4711 [ 296.860013][ T6694] tipc: Enabled bearer , priority 7 [ 296.943829][ T6695] ªªªªªª: renamed from syzkaller0 [ 297.035019][ T6695] tipc: Disabling bearer [ 297.083016][ T6690] syz.1.276: attempt to access beyond end of device [ 297.083016][ T6690] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 297.102739][ T6690] syz.1.276: attempt to access beyond end of device [ 297.102739][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.152097][ T6690] +F: attempt to access beyond end of device [ 297.152097][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.171297][ T6690] +F: attempt to access beyond end of device [ 297.171297][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.208624][ T6690] +F: attempt to access beyond end of device [ 297.208624][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.226354][ T6690] +F: attempt to access beyond end of device [ 297.226354][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.260847][ T6690] +F: attempt to access beyond end of device [ 297.260847][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.311032][ T6690] +F: attempt to access beyond end of device [ 297.311032][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 297.370858][ T6690] +F: attempt to access beyond end of device [ 297.370858][ T6690] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 298.092987][ T6705] netlink: 64 bytes leftover after parsing attributes in process `syz.0.283'. [ 298.172360][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 298.258129][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'. [ 298.568543][ T6711] loop0: detected capacity change from 0 to 512 [ 299.162068][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.175235][ T6711] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.790689][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 299.790764][ T29] audit: type=1800 audit(1733396429.827:384): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 299.907345][ T6723] loop2: detected capacity change from 0 to 128 [ 300.182899][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.256849][ T6723] syz.2.288: attempt to access beyond end of device [ 300.256849][ T6723] loop2: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 300.320058][ T29] audit: type=1800 audit(1733396429.887:385): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 300.341962][ T29] audit: type=1800 audit(1733396430.187:386): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.288" name="bus" dev="loop2" ino=1048602 res=0 errno=0 [ 300.502195][ T6731] netlink: 64 bytes leftover after parsing attributes in process `syz.4.294'. [ 301.023909][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 301.078752][ T3973] Buffer I/O error on dev loop2, logical block 177, lost async page write [ 301.347996][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.298'. [ 301.754301][ T29] audit: type=1326 audit(1733396431.807:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 301.777294][ T29] audit: type=1326 audit(1733396431.807:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.074464][ T29] audit: type=1326 audit(1733396431.877:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.097623][ T29] audit: type=1326 audit(1733396431.887:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.123944][ T29] audit: type=1326 audit(1733396431.887:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.147792][ T29] audit: type=1326 audit(1733396431.897:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.170639][ T29] audit: type=1326 audit(1733396431.907:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.4.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 302.506556][ T6755] program syz.4.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.784379][ T6758] loop0: detected capacity change from 0 to 128 [ 302.905750][ T6762] loop3: detected capacity change from 0 to 128 [ 302.931080][ T6761] netlink: 64 bytes leftover after parsing attributes in process `syz.4.307'. [ 303.324205][ T6762] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.390936][ T6762] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 303.982224][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.311'. [ 303.996086][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.089751][ T6787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.318'. [ 307.281860][ T6801] mmap: syz.0.322 (6801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 309.091514][ T6827] netlink: 64 bytes leftover after parsing attributes in process `syz.4.330'. [ 309.449501][ T6832] loop3: detected capacity change from 0 to 128 [ 309.469918][ T6833] loop0: detected capacity change from 0 to 512 [ 309.599185][ T6833] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.333: casefold flag without casefold feature [ 309.615635][ T6833] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.333: couldn't read orphan inode 15 (err -117) [ 309.776468][ T6833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.119128][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 310.119284][ T29] audit: type=1800 audit(1733396440.157:398): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.333" name="file1" dev="loop0" ino=19 res=0 errno=0 [ 310.760469][ T29] audit: type=1326 audit(1733396440.797:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.783373][ T29] audit: type=1326 audit(1733396440.797:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.806609][ T29] audit: type=1326 audit(1733396440.807:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.833022][ T29] audit: type=1326 audit(1733396440.807:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.857090][ T29] audit: type=1326 audit(1733396440.807:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.879870][ T29] audit: type=1326 audit(1733396440.807:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.902982][ T29] audit: type=1326 audit(1733396440.817:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.929197][ T29] audit: type=1326 audit(1733396440.817:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 310.953261][ T29] audit: type=1326 audit(1733396440.817:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6854 comm="syz.1.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fca17ff19 code=0x7ffc0000 [ 311.390600][ T6846] loop0: detected capacity change from 512 to 0 [ 311.402337][ T6863] bio_check_eod: 2 callbacks suppressed [ 311.402411][ T6863] syz.0.333: attempt to access beyond end of device [ 311.402411][ T6863] loop0: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 311.422269][ T6863] syz.0.333: attempt to access beyond end of device [ 311.422269][ T6863] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 311.440838][ T6863] syz.0.333: attempt to access beyond end of device [ 311.440838][ T6863] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 311.455902][ T6863] syz.0.333: attempt to access beyond end of device [ 311.455902][ T6863] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 311.469633][ T6863] syz.0.333: attempt to access beyond end of device [ 311.469633][ T6863] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 311.483421][ T6863] syz.0.333: attempt to access beyond end of device [ 311.483421][ T6863] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 311.497772][ T6863] syz.0.333: attempt to access beyond end of device [ 311.497772][ T6863] loop0: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 311.511436][ T6863] syz.0.333: attempt to access beyond end of device [ 311.511436][ T6863] loop0: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 311.525205][ T6863] syz.0.333: attempt to access beyond end of device [ 311.525205][ T6863] loop0: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 311.543333][ T6863] EXT4-fs error (device loop0): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.0.333: unable to read itable block [ 311.558211][ T6863] syz.0.333: attempt to access beyond end of device [ 311.558211][ T6863] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 311.571726][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.580460][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.587464][ T6863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: IO failure [ 311.596565][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.605153][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.612335][ T6863] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #19: comm syz.0.333: mark_inode_dirty error [ 311.623979][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.637401][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.646662][ T6863] EXT4-fs error (device loop0): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.0.333: unable to read itable block [ 311.659746][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.668373][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.676033][ T6863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: IO failure [ 311.685141][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.693744][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.701133][ T6863] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #19: comm syz.0.333: mark_inode_dirty error [ 311.712783][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.721435][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.790984][ T6862] syz.1.343[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.791405][ T6862] syz.1.343[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.841495][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.333'. [ 311.921705][ T6863] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.333: Error while async write back metadata [ 311.934898][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.949242][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.957773][ T6863] EXT4-fs error (device loop0): ext4_check_bdev_write_error:225: comm syz.0.333: Error while async write back metadata [ 311.970732][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 311.979231][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 311.986784][ T6863] EXT4-fs error (device loop0): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.0.333: unable to read itable block [ 311.999866][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 312.002630][ T6862] syz.1.343[6862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.008461][ T6863] EXT4-fs (loop0): I/O error while writing superblock [ 312.008563][ T6863] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: IO failure [ 312.036859][ T6863] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 314.541034][ T6870] netlink: 64 bytes leftover after parsing attributes in process `syz.4.345'. [ 314.769635][ T5789] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 315.020477][ T6877] loop4: detected capacity change from 0 to 512 [ 315.054682][ T3973] EXT4-fs: 24 callbacks suppressed [ 315.054764][ T3973] EXT4-fs (loop0): I/O error while writing superblock [ 315.067635][ T3973] EXT4-fs (loop0): I/O error while writing superblock [ 315.104125][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.158928][ T6878] raw_sendmsg: syz.1.349 forgot to set AF_INET. Fix it! [ 315.182607][ T5789] EXT4-fs (loop0): I/O error while writing superblock [ 315.196308][ T6877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.209602][ T6877] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.559152][ T4056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.845741][ T4056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.083138][ T4056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.277630][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.475206][ T4056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.067549][ T4056] bridge_slave_1: left allmulticast mode [ 317.073608][ T4056] bridge_slave_1: left promiscuous mode [ 317.080333][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.188762][ T4056] bridge_slave_0: left allmulticast mode [ 317.196245][ T4056] bridge_slave_0: left promiscuous mode [ 317.203147][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.778309][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.809306][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.849298][ T4056] bond0 (unregistering): Released all slaves [ 318.024906][ T4056] tipc: Left network mode [ 318.642340][ T4056] hsr_slave_0: left promiscuous mode [ 318.678412][ T4056] hsr_slave_1: left promiscuous mode [ 318.713576][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.722011][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.779684][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.787924][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.912293][ T4056] veth1_macvtap: left promiscuous mode [ 318.918197][ T4056] veth0_macvtap: left promiscuous mode [ 318.924228][ T4056] veth1_vlan: left promiscuous mode [ 318.929806][ T4056] veth0_vlan: left promiscuous mode [ 319.508336][ T6908] loop1: detected capacity change from 0 to 512 [ 319.612581][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.635024][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.652811][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.666480][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.678150][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 319.687579][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.731009][ T6908] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.358: casefold flag without casefold feature [ 319.751350][ T6908] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.358: couldn't read orphan inode 15 (err -117) [ 319.908751][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.977228][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 319.977297][ T29] audit: type=1326 audit(1733396450.037:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.080621][ T29] audit: type=1326 audit(1733396450.097:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.104987][ T29] audit: type=1326 audit(1733396450.107:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.132156][ T29] audit: type=1326 audit(1733396450.127:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.156179][ T29] audit: type=1326 audit(1733396450.137:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.178801][ T29] audit: type=1326 audit(1733396450.137:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.472135][ T29] audit: type=1326 audit(1733396450.337:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.495142][ T29] audit: type=1326 audit(1733396450.337:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.518777][ T29] audit: type=1800 audit(1733396450.337:429): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.358" name="file1" dev="loop1" ino=19 res=0 errno=0 [ 320.541987][ T29] audit: type=1326 audit(1733396450.397:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6913 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 320.783020][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 320.884899][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 321.060727][ T6924] loop1: detected capacity change from 512 to 0 [ 321.244818][ T6929] bio_check_eod: 99 callbacks suppressed [ 321.244896][ T6929] syz.1.358: attempt to access beyond end of device [ 321.244896][ T6929] loop1: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 321.271624][ T6929] syz.1.358: attempt to access beyond end of device [ 321.271624][ T6929] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 321.285350][ T6929] syz.1.358: attempt to access beyond end of device [ 321.285350][ T6929] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 321.299203][ T6929] syz.1.358: attempt to access beyond end of device [ 321.299203][ T6929] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 321.312960][ T6929] syz.1.358: attempt to access beyond end of device [ 321.312960][ T6929] loop1: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 321.328540][ T6929] syz.1.358: attempt to access beyond end of device [ 321.328540][ T6929] loop1: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 321.342525][ T6929] syz.1.358: attempt to access beyond end of device [ 321.342525][ T6929] loop1: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 321.360752][ T6929] syz.1.358: attempt to access beyond end of device [ 321.360752][ T6929] loop1: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 321.375910][ T6929] syz.1.358: attempt to access beyond end of device [ 321.375910][ T6929] loop1: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 321.389454][ T6929] EXT4-fs error (device loop1): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.1.358: unable to read itable block [ 321.402607][ T6929] syz.1.358: attempt to access beyond end of device [ 321.402607][ T6929] loop1: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 321.416053][ T6929] buffer_io_error: 24 callbacks suppressed [ 321.416123][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.431392][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.443958][ T6929] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: IO failure [ 321.453160][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.466712][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.475299][ T6929] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.358: mark_inode_dirty error [ 321.486986][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.495623][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.503235][ T6929] EXT4-fs error (device loop1): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.1.358: unable to read itable block [ 321.516336][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.525091][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.532885][ T6929] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: IO failure [ 321.541995][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.550669][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.557665][ T6929] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.358: mark_inode_dirty error [ 321.574093][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.584242][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.592383][ T6929] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.358: Error while async write back metadata [ 321.605365][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.614042][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.621153][ T6929] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.358: Error while async write back metadata [ 321.634077][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.642806][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.650497][ T6929] EXT4-fs error (device loop1): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.1.358: unable to read itable block [ 321.668217][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.678323][ T6929] EXT4-fs (loop1): I/O error while writing superblock [ 321.685490][ T6929] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: IO failure [ 321.694644][ T6929] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 321.872309][ T5792] Bluetooth: hci4: command tx timeout [ 322.714289][ T6940] loop3: detected capacity change from 0 to 128 [ 323.121060][ T6907] chnl_net:caif_netlink_parms(): no params data found [ 323.933131][ T5792] Bluetooth: hci4: command tx timeout [ 325.020353][ T59] EXT4-fs: 24 callbacks suppressed [ 325.020427][ T59] EXT4-fs (loop1): I/O error while writing superblock [ 325.060753][ T59] EXT4-fs (loop1): I/O error while writing superblock [ 325.684026][ T5787] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 325.972207][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.979919][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.988226][ T6907] bridge_slave_0: entered allmulticast mode [ 325.997284][ T6907] bridge_slave_0: entered promiscuous mode [ 326.059941][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.097736][ T5792] Bluetooth: hci4: command tx timeout [ 326.176769][ T5787] EXT4-fs (loop1): I/O error while writing superblock [ 326.237477][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.246014][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.254128][ T6907] bridge_slave_1: entered allmulticast mode [ 326.263122][ T6907] bridge_slave_1: entered promiscuous mode [ 326.435086][ T6963] loop4: detected capacity change from 0 to 1024 [ 326.719821][ T6963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.023428][ T6963] EXT4-fs (loop4): shut down requested (0) [ 327.317857][ T4101] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.594938][ T6907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.621727][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.677247][ T4101] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.749840][ T6907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.997819][ T4101] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.280422][ T5792] Bluetooth: hci4: command tx timeout [ 328.427836][ T4101] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.998511][ T6907] team0: Port device team_slave_0 added [ 329.053560][ T6907] team0: Port device team_slave_1 added [ 329.116687][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 329.154205][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 329.170379][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 329.185960][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 329.225175][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 329.299923][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 329.584671][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.592354][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.612019][ T6998] loop4: detected capacity change from 0 to 128 [ 329.618633][ T6907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.975885][ T6907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.983290][ T6907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.009729][ T6907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.032697][ T4101] bridge_slave_1: left allmulticast mode [ 330.038609][ T4101] bridge_slave_1: left promiscuous mode [ 330.045270][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.091059][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 330.128741][ T4101] bridge_slave_0: left allmulticast mode [ 330.136454][ T4101] bridge_slave_0: left promiscuous mode [ 330.143171][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.196592][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 330.206021][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 330.946209][ T4101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.020875][ T4101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.045956][ T4101] bond0 (unregistering): Released all slaves [ 331.371012][ T5792] Bluetooth: hci3: command tx timeout [ 331.742263][ T7008] loop2: detected capacity change from 0 to 1024 [ 331.753566][ T6907] hsr_slave_0: entered promiscuous mode [ 331.842893][ T6907] hsr_slave_1: entered promiscuous mode [ 331.900514][ T6907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.911186][ T6907] Cannot create hsr debugfs directory [ 332.023390][ T7008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.495674][ T4101] hsr_slave_0: left promiscuous mode [ 332.540930][ T4101] hsr_slave_1: left promiscuous mode [ 332.561028][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.568770][ T4101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.612932][ T4101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.624161][ T4101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.672958][ T4101] veth1_macvtap: left promiscuous mode [ 332.678741][ T4101] veth0_macvtap: left promiscuous mode [ 332.684886][ T4101] veth1_vlan: left promiscuous mode [ 332.690578][ T4101] veth0_vlan: left promiscuous mode [ 333.023088][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.451508][ T5792] Bluetooth: hci3: command tx timeout [ 333.801278][ T4101] team0 (unregistering): Port device team_slave_1 removed [ 333.832693][ T4101] team0 (unregistering): Port device team_slave_0 removed [ 335.251364][ T6985] chnl_net:caif_netlink_parms(): no params data found [ 335.550593][ T5792] Bluetooth: hci3: command tx timeout [ 335.595961][ T6907] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 335.745853][ T6907] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.821582][ T6907] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.914314][ T6907] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.431176][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.492114][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.499815][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.507893][ T6985] bridge_slave_0: entered allmulticast mode [ 337.517247][ T6985] bridge_slave_0: entered promiscuous mode [ 337.620899][ T5796] Bluetooth: hci3: command tx timeout [ 337.754497][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.762480][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.770437][ T6985] bridge_slave_1: entered allmulticast mode [ 337.779478][ T6985] bridge_slave_1: entered promiscuous mode [ 337.928947][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.035265][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.065073][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.469154][ T6985] team0: Port device team_slave_0 added [ 338.572717][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.580545][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.629618][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.637432][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.757476][ T6985] team0: Port device team_slave_1 added [ 338.933069][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 338.940912][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 338.947160][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 338.992949][ T7074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.118851][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.126372][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.152920][ T6985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.376210][ T6985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.387621][ T6985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.416121][ T6985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.068267][ T6985] hsr_slave_0: entered promiscuous mode [ 340.176496][ T6985] hsr_slave_1: entered promiscuous mode [ 340.225974][ T6985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.234005][ T6985] Cannot create hsr debugfs directory [ 340.629517][ T7096] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 340.737898][ T7096] bridge0: port 3(team0) entered blocking state [ 340.745329][ T7096] bridge0: port 3(team0) entered disabled state [ 340.752557][ T7096] team0: entered allmulticast mode [ 340.757907][ T7096] team_slave_0: entered allmulticast mode [ 340.764083][ T7096] team_slave_1: entered allmulticast mode [ 340.775076][ T7096] team0: entered promiscuous mode [ 340.781804][ T7096] team_slave_0: entered promiscuous mode [ 340.788581][ T7096] team_slave_1: entered promiscuous mode [ 340.797739][ T7096] bridge0: port 3(team0) entered blocking state [ 340.804746][ T7096] bridge0: port 3(team0) entered forwarding state [ 341.519842][ T6907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.996564][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.003351][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.055201][ T6985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 342.227055][ T6985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 342.263944][ T6985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 342.602349][ T6985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 343.627465][ T7126] loop4: detected capacity change from 0 to 164 [ 343.849934][ T6985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.122244][ T6985] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.305734][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.313604][ T4101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.611884][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.619544][ T4101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.730105][ T6985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.740899][ T6985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.218753][ T6907] veth0_vlan: entered promiscuous mode [ 345.248247][ T6907] veth1_vlan: entered promiscuous mode [ 345.314176][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 345.314255][ T29] audit: type=1326 audit(1733396475.177:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 345.347616][ T29] audit: type=1326 audit(1733396475.197:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 345.371370][ T29] audit: type=1326 audit(1733396475.197:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7135 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceefd7ff19 code=0x7ffc0000 [ 345.449115][ T7145] loop3: detected capacity change from 0 to 512 [ 345.834820][ T6907] veth0_macvtap: entered promiscuous mode [ 345.910446][ T6907] veth1_macvtap: entered promiscuous mode [ 345.986198][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.998109][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.008293][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.019715][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.029821][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.043433][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.058888][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.098002][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.109185][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.120591][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.132998][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.146944][ T6907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.160033][ T6907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.176848][ T6907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.195454][ T6907] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.205464][ T6907] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.214606][ T6907] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.223710][ T6907] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.423937][ T7145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.437224][ T7145] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.614570][ T6985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.310013][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.921116][ T6985] veth0_vlan: entered promiscuous mode [ 348.987356][ T6985] veth1_vlan: entered promiscuous mode [ 349.125505][ T6985] veth0_macvtap: entered promiscuous mode [ 349.146032][ T6985] veth1_macvtap: entered promiscuous mode [ 349.193693][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.204541][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.218136][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.229799][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.239966][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.250872][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.261044][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.271845][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.286363][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.304264][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.318179][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.329193][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.340070][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.350436][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.361199][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.372671][ T6985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.383973][ T6985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.398405][ T6985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.421470][ T6985] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.430738][ T6985] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.439765][ T6985] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.448955][ T6985] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.426717][ T7208] loop4: detected capacity change from 0 to 512 [ 351.915010][ T7208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.928559][ T7208] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.348277][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.811521][ T7242] loop3: detected capacity change from 0 to 512 [ 353.898373][ T7242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.973154][ T7242] EXT4-fs (loop3): 1 truncate cleaned up [ 353.981610][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.416467][ T7253] loop2: detected capacity change from 0 to 256 [ 354.564638][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.595019][ T7253] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 354.607015][ T7253] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 354.619023][ T7253] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 354.676569][ T7253] syz.2.435 (7253) used greatest stack depth: 4040 bytes left [ 354.680512][ T29] audit: type=1800 audit(1733396484.697:437): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.435" name="file1" dev="loop2" ino=1048603 res=0 errno=0 [ 355.127735][ T4056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.136648][ T4056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.190015][ T4101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.198610][ T4101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.484034][ T7268] loop2: detected capacity change from 0 to 512 [ 355.757598][ T7268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.776100][ T7268] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.976944][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 355.986496][ T7276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.440'. [ 355.995915][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 362.007771][ T3856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.019649][ T3856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.154139][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.593433][ T3856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.601916][ T3856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.401568][ T29] audit: type=1326 audit(1733396493.437:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.675221][ T29] audit: type=1326 audit(1733396493.497:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.699026][ T29] audit: type=1326 audit(1733396493.497:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.722316][ T29] audit: type=1326 audit(1733396493.537:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.745089][ T29] audit: type=1326 audit(1733396493.537:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.772911][ T29] audit: type=1326 audit(1733396493.557:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 363.797408][ T29] audit: type=1326 audit(1733396493.567:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.5.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbbd7ff19 code=0x7ffc0000 [ 365.952194][ T7303] syz.2.443[7303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.952608][ T7303] syz.2.443[7303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.087119][ T7303] syz.2.443[7303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.180589][ T7307] loop4: detected capacity change from 0 to 128 [ 366.650795][ T29] audit: type=1800 audit(1733396496.417:445): pid=7307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.449" name="bus" dev="loop4" ino=1048613 res=0 errno=0 [ 367.659580][ T7319] loop2: detected capacity change from 0 to 512 [ 368.121307][ T7332] loop5: detected capacity change from 0 to 2048 [ 368.186799][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.200911][ T7319] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.764975][ T7342] serio: Serial port pts0 [ 368.800614][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.248665][ T7351] netlink: 'syz.6.463': attribute type 10 has an invalid length. [ 369.557189][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'. [ 369.570829][ T7354] netlink: 'syz.3.464': attribute type 10 has an invalid length. [ 369.712195][ T7351] team0: Port device netdevsim3 added [ 369.815810][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.830697][ T7354] bond0: (slave team0): Enslaving as an active interface with an up link [ 373.822567][ T7402] loop2: detected capacity change from 0 to 164 [ 374.038709][ T7405] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 374.247056][ T7402] bio_check_eod: 99 callbacks suppressed [ 374.247135][ T7402] syz.2.473: attempt to access beyond end of device [ 374.247135][ T7402] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 374.267982][ T7402] syz.2.473: attempt to access beyond end of device [ 374.267982][ T7402] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 374.316691][ T29] audit: type=1800 audit(1733396504.347:446): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.473" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 376.210901][ T7431] loop5: detected capacity change from 0 to 512 [ 376.372829][ T7431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.343032][ T7446] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 377.488999][ T7446] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.505586][ T7446] bond0: (slave team0): Enslaving as an active interface with an up link [ 377.653511][ T6907] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.365718][ T7460] netlink: 44 bytes leftover after parsing attributes in process `syz.6.500'. [ 379.481589][ T7477] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 379.562353][ T7477] bridge0: port 3(team0) entered disabled state [ 379.595817][ T7477] team0: left allmulticast mode [ 379.601542][ T7477] team_slave_0: left allmulticast mode [ 379.607249][ T7477] team_slave_1: left allmulticast mode [ 379.613347][ T7477] team0: left promiscuous mode [ 379.618345][ T7477] team_slave_0: left promiscuous mode [ 379.629093][ T7477] team_slave_1: left promiscuous mode [ 379.636688][ T7477] bridge0: port 3(team0) entered disabled state [ 379.721421][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.739688][ T7477] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.281080][ T29] audit: type=1326 audit(1733396510.347:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.379172][ T29] audit: type=1326 audit(1733396510.377:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.402716][ T29] audit: type=1326 audit(1733396510.387:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.425987][ T29] audit: type=1326 audit(1733396510.387:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.450915][ T29] audit: type=1326 audit(1733396510.387:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.474529][ T29] audit: type=1326 audit(1733396510.397:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.498451][ T29] audit: type=1326 audit(1733396510.417:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 380.521487][ T29] audit: type=1326 audit(1733396510.427:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 381.172396][ T29] audit: type=1326 audit(1733396510.617:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 381.172622][ T29] audit: type=1326 audit(1733396510.667:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4bde97ff19 code=0x7ffc0000 [ 381.962041][ T7515] Falling back ldisc for ttyS3. [ 382.117241][ T7526] netlink: 'syz.6.524': attribute type 10 has an invalid length. [ 382.148407][ T7526] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.163949][ T7526] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.744993][ T7533] loop5: detected capacity change from 0 to 1024 [ 382.757280][ T7533] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 382.841676][ T7533] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.527: Invalid block bitmap block 0 in block_group 0 [ 382.942291][ T7533] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.527: Failed to acquire dquot type 0 [ 382.987306][ T7533] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.527: Freeing blocks not in datazone - block = 0, count = 4096 [ 383.075096][ T7533] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.527: Invalid inode bitmap blk 0 in block_group 0 [ 383.112997][ T4056] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:17: Failed to release dquot type 0 [ 383.147144][ T7533] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 383.186710][ T7533] EXT4-fs (loop5): 1 orphan inode deleted [ 383.194725][ T7533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.333599][ T7533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.367693][ T7565] netlink: 'syz.2.538': attribute type 10 has an invalid length. [ 384.602137][ T7569] 9pnet_fd: Insufficient options for proto=fd [ 386.227072][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 386.227149][ T29] audit: type=1326 audit(1733396516.287:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.256398][ T29] audit: type=1326 audit(1733396516.287:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.281404][ T29] audit: type=1326 audit(1733396516.287:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.304828][ T29] audit: type=1326 audit(1733396516.307:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.417285][ T29] audit: type=1326 audit(1733396516.477:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.440457][ T29] audit: type=1326 audit(1733396516.477:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.560580][ T29] audit: type=1326 audit(1733396516.557:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.583640][ T29] audit: type=1326 audit(1733396516.557:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.608617][ T29] audit: type=1326 audit(1733396516.557:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.632009][ T29] audit: type=1326 audit(1733396516.557:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7600 comm="syz.6.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fbb7597ff19 code=0x7ffc0000 [ 386.823771][ T7609] 9pnet_fd: Insufficient options for proto=fd [ 387.982946][ T7621] pim6reg1: entered promiscuous mode [ 387.988663][ T7621] pim6reg1: entered allmulticast mode [ 388.252784][ T7596] loop3: detected capacity change from 0 to 512 [ 388.281930][ T7596] ext4: Unknown parameter 'smackfsroot' [ 388.373976][ T7596] loop3: detected capacity change from 0 to 512 [ 388.558885][ T7596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.572702][ T7596] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.724399][ T7652] loop6: detected capacity change from 0 to 256 [ 389.888029][ T7652] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 389.899002][ T7652] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 389.909649][ T7652] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 390.558864][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.037324][ T7666] loop4: detected capacity change from 0 to 512 [ 391.109806][ T7666] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.577: casefold flag without casefold feature [ 391.124389][ T7666] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.577: couldn't read orphan inode 15 (err -117) [ 391.148306][ T7666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.334376][ T7676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.579'. [ 391.538328][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 391.538406][ T29] audit: type=1800 audit(1733396521.557:638): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.577" name="file1" dev="loop4" ino=19 res=0 errno=0 [ 391.843449][ T7686] loop3: detected capacity change from 0 to 128 [ 391.871338][ T7687] loop4: detected capacity change from 512 to 0 [ 391.886459][ T7692] syz.4.577: attempt to access beyond end of device [ 391.886459][ T7692] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 391.901492][ T7692] syz.4.577: attempt to access beyond end of device [ 391.901492][ T7692] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 391.918166][ T7692] syz.4.577: attempt to access beyond end of device [ 391.918166][ T7692] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 391.933429][ T7692] syz.4.577: attempt to access beyond end of device [ 391.933429][ T7692] loop4: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 391.947835][ T7692] syz.4.577: attempt to access beyond end of device [ 391.947835][ T7692] loop4: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 391.962006][ T7692] syz.4.577: attempt to access beyond end of device [ 391.962006][ T7692] loop4: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 391.975755][ T7692] syz.4.577: attempt to access beyond end of device [ 391.975755][ T7692] loop4: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 391.989476][ T7692] syz.4.577: attempt to access beyond end of device [ 391.989476][ T7692] loop4: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 392.003289][ T7692] EXT4-fs error (device loop4): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.4.577: unable to read itable block [ 392.019017][ T7692] syz.4.577: attempt to access beyond end of device [ 392.019017][ T7692] loop4: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 392.033422][ T7692] buffer_io_error: 24 callbacks suppressed [ 392.033496][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.048114][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.055280][ T7692] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: IO failure [ 392.064534][ T7692] syz.4.577: attempt to access beyond end of device [ 392.064534][ T7692] loop4: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 392.078029][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.086719][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.093997][ T7692] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.577: mark_inode_dirty error [ 392.105727][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.117329][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.125830][ T7692] EXT4-fs error (device loop4): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.4.577: unable to read itable block [ 392.138967][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.147628][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.155351][ T7692] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: IO failure [ 392.164477][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.173158][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.180746][ T7692] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #19: comm syz.4.577: mark_inode_dirty error [ 392.192458][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.201138][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.289434][ T29] audit: type=1800 audit(1733396522.337:639): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="bus" dev="loop3" ino=1048616 res=0 errno=0 [ 392.439762][ T7692] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.577: Error while async write back metadata [ 392.452897][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.462904][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.469926][ T7692] EXT4-fs error (device loop4): ext4_check_bdev_write_error:225: comm syz.4.577: Error while async write back metadata [ 392.483007][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.493382][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.501031][ T7692] EXT4-fs error (device loop4): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.4.577: unable to read itable block [ 392.514120][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.522787][ T7692] EXT4-fs (loop4): I/O error while writing superblock [ 392.532861][ T7692] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: IO failure [ 392.542905][ T7692] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 392.573695][ T29] audit: type=1800 audit(1733396522.497:640): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.582" name="bus" dev="loop3" ino=1048616 res=0 errno=0 [ 392.814959][ T7704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.586'. [ 393.237949][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'. [ 393.560688][ T7716] loop6: detected capacity change from 0 to 256 [ 393.689443][ T7716] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.689637][ T7716] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.689807][ T7716] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 393.692920][ T29] audit: type=1800 audit(1733396523.757:641): pid=7716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.592" name="file1" dev="loop6" ino=1048617 res=0 errno=0 [ 395.023727][ T7735] loop5: detected capacity change from 0 to 128 [ 395.159568][ T5780] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 395.291395][ T29] audit: type=1800 audit(1733396525.347:642): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.599" name="bus" dev="loop5" ino=1048619 res=0 errno=0 [ 395.381935][ T29] audit: type=1800 audit(1733396525.397:643): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.599" name="bus" dev="loop5" ino=1048619 res=0 errno=0 [ 395.867040][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.603'. [ 395.919877][ T3856] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.344204][ T3856] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.538587][ T3856] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.727694][ T3856] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.137593][ T3856] bridge_slave_1: left allmulticast mode [ 397.137707][ T3856] bridge_slave_1: left promiscuous mode [ 397.138707][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.153391][ T3856] bridge_slave_0: left allmulticast mode [ 397.153498][ T3856] bridge_slave_0: left promiscuous mode [ 397.154362][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.622727][ T7760] loop5: detected capacity change from 0 to 512 [ 397.925182][ T7760] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.611: casefold flag without casefold feature [ 397.925991][ T7760] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.611: couldn't read orphan inode 15 (err -117) [ 397.928286][ T7760] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.098777][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 398.108803][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.108957][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 398.144762][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 398.208359][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.223464][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.236193][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.247037][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.311352][ T7768] loop3: detected capacity change from 0 to 128 [ 398.352838][ T29] audit: type=1800 audit(1733396528.417:644): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.611" name="file1" dev="loop5" ino=19 res=0 errno=0 [ 398.368670][ T3856] bond0 (unregistering): (slave team0): Releasing backup interface [ 398.425084][ T3856] bond0 (unregistering): Released all slaves [ 398.538377][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 398.581634][ T7760] loop5: detected capacity change from 512 to 0 [ 398.603588][ T7773] bio_check_eod: 86 callbacks suppressed [ 398.603663][ T7773] syz.5.611: attempt to access beyond end of device [ 398.603663][ T7773] loop5: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 398.623585][ T7773] syz.5.611: attempt to access beyond end of device [ 398.623585][ T7773] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 398.637366][ T7773] syz.5.611: attempt to access beyond end of device [ 398.637366][ T7773] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 398.651105][ T7773] syz.5.611: attempt to access beyond end of device [ 398.651105][ T7773] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 398.664925][ T7773] syz.5.611: attempt to access beyond end of device [ 398.664925][ T7773] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 398.681542][ T7773] syz.5.611: attempt to access beyond end of device [ 398.681542][ T7773] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 398.696996][ T7773] syz.5.611: attempt to access beyond end of device [ 398.696996][ T7773] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 398.710751][ T7773] syz.5.611: attempt to access beyond end of device [ 398.710751][ T7773] loop5: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 398.724525][ T7773] syz.5.611: attempt to access beyond end of device [ 398.724525][ T7773] loop5: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 398.738184][ T7773] EXT4-fs error (device loop5): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.5.611: unable to read itable block [ 398.751302][ T7773] syz.5.611: attempt to access beyond end of device [ 398.751302][ T7773] loop5: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 398.764761][ T7773] buffer_io_error: 23 callbacks suppressed [ 398.764836][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.783807][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 398.790952][ T7773] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: IO failure [ 398.799945][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.808644][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 398.815913][ T7773] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.611: mark_inode_dirty error [ 398.828517][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.837185][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 398.844787][ T7773] EXT4-fs error (device loop5): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.5.611: unable to read itable block [ 398.857917][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.866628][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 398.878014][ T7773] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: IO failure [ 398.887947][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.898489][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 398.905719][ T7773] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #19: comm syz.5.611: mark_inode_dirty error [ 398.917481][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 398.926166][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 399.068086][ T7773] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz.5.611: Error while async write back metadata [ 399.088513][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 399.099200][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 399.106323][ T7773] EXT4-fs error (device loop5): ext4_check_bdev_write_error:225: comm syz.5.611: Error while async write back metadata [ 399.120484][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 399.129076][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 399.136738][ T7773] EXT4-fs error (device loop5): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.5.611: unable to read itable block [ 399.150270][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 399.158778][ T7773] EXT4-fs (loop5): I/O error while writing superblock [ 399.165983][ T7773] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: IO failure [ 399.175200][ T7773] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 399.426525][ T7783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'. [ 399.626116][ T6907] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 400.136308][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 400.338042][ T5786] Bluetooth: hci2: command tx timeout [ 400.370069][ T3856] hsr_slave_0: left promiscuous mode [ 400.553468][ T3856] hsr_slave_1: left promiscuous mode [ 400.662119][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.662318][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.665166][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.665301][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.675611][ T3856] veth1_macvtap: left promiscuous mode [ 400.675750][ T3856] veth0_macvtap: left promiscuous mode [ 400.676031][ T3856] veth1_vlan: left promiscuous mode [ 400.676236][ T3856] veth0_vlan: left promiscuous mode [ 401.989582][ T3856] team0 (unregistering): Port device team_slave_1 removed [ 402.012803][ T3856] team0 (unregistering): Port device team_slave_0 removed [ 402.135812][ T7809] loop6: detected capacity change from 0 to 512 [ 402.146962][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.158993][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.181407][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.200568][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.211918][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.221344][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.281731][ T7813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 402.348747][ T7809] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.630: casefold flag without casefold feature [ 402.432663][ T5786] Bluetooth: hci2: command tx timeout [ 402.519429][ T7809] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.630: couldn't read orphan inode 15 (err -117) [ 402.693485][ T7809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.005782][ T3856] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.025031][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 403.132808][ T29] audit: type=1800 audit(1733396533.187:645): pid=7809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.630" name="file1" dev="loop6" ino=19 res=0 errno=0 [ 403.161464][ T3856] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.325330][ T3856] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.429609][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.436769][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.527184][ T7809] loop6: detected capacity change from 512 to 0 [ 403.556458][ T7824] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.630: unable to read itable block [ 403.569656][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.577082][ T7824] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 403.592095][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.599101][ T7824] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.630: mark_inode_dirty error [ 403.612545][ T7824] bio_check_eod: 109 callbacks suppressed [ 403.612616][ T7824] syz.6.630: attempt to access beyond end of device [ 403.612616][ T7824] loop6: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 403.632537][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.639753][ T7824] syz.6.630: attempt to access beyond end of device [ 403.639753][ T7824] loop6: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 403.653725][ T7824] syz.6.630: attempt to access beyond end of device [ 403.653725][ T7824] loop6: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 403.667374][ T7824] syz.6.630: attempt to access beyond end of device [ 403.667374][ T7824] loop6: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 403.681197][ T7824] syz.6.630: attempt to access beyond end of device [ 403.681197][ T7824] loop6: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 403.702046][ T7824] syz.6.630: attempt to access beyond end of device [ 403.702046][ T7824] loop6: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 403.717713][ T7824] syz.6.630: attempt to access beyond end of device [ 403.717713][ T7824] loop6: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 403.735858][ T7824] syz.6.630: attempt to access beyond end of device [ 403.735858][ T7824] loop6: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 403.749633][ T7824] syz.6.630: attempt to access beyond end of device [ 403.749633][ T7824] loop6: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 403.763217][ T7824] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.630: unable to read itable block [ 403.776273][ T7824] syz.6.630: attempt to access beyond end of device [ 403.776273][ T7824] loop6: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 403.797003][ T7824] buffer_io_error: 27 callbacks suppressed [ 403.797080][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.813773][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.820873][ T7824] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 403.829855][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.838466][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.845624][ T7824] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #19: comm syz.6.630: mark_inode_dirty error [ 403.857305][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.866086][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.876761][ T7824] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.630: Error while async write back metadata [ 403.889744][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.908307][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.915507][ T7824] EXT4-fs error (device loop6): ext4_check_bdev_write_error:225: comm syz.6.630: Error while async write back metadata [ 403.928414][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.937195][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.944698][ T7824] EXT4-fs error (device loop6): ext4_get_inode_loc:4573: inode #19: block 9: comm syz.6.630: unable to read itable block [ 403.957871][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.966585][ T7824] EXT4-fs (loop6): I/O error while writing superblock [ 403.973698][ T7824] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: IO failure [ 403.982889][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 403.991627][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 404.015724][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.023677][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.031665][ T7764] bridge_slave_0: entered allmulticast mode [ 404.040734][ T7764] bridge_slave_0: entered promiscuous mode [ 404.047085][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 404.057307][ T7824] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 404.115343][ T3856] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.138046][ T7838] netlink: 84 bytes leftover after parsing attributes in process `syz.2.636'. [ 404.233591][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.241601][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.249373][ T7764] bridge_slave_1: entered allmulticast mode [ 404.258566][ T7764] bridge_slave_1: entered promiscuous mode [ 404.498096][ T5792] Bluetooth: hci2: command tx timeout [ 404.570439][ T5792] Bluetooth: hci4: command tx timeout [ 404.585145][ T6985] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 404.641812][ T3856] bridge_slave_1: left allmulticast mode [ 404.647854][ T3856] bridge_slave_1: left promiscuous mode [ 404.657419][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.674367][ T3856] bridge_slave_0: left allmulticast mode [ 404.682670][ T3856] bridge_slave_0: left promiscuous mode [ 404.690723][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.347811][ T3856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.512062][ T3856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.517406][ T3856] bond0 (unregistering): Released all slaves [ 405.728121][ T7849] loop2: detected capacity change from 0 to 512 [ 405.782873][ T7849] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 405.822402][ T7849] EXT4-fs (loop2): 1 truncate cleaned up [ 405.842208][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.863719][ T7849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.965482][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.975486][ T7810] chnl_net:caif_netlink_parms(): no params data found [ 406.121461][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.641'. [ 406.138992][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.572161][ T5792] Bluetooth: hci2: command tx timeout [ 406.587419][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.643'. [ 406.650405][ T5792] Bluetooth: hci4: command tx timeout [ 407.018304][ T7764] team0: Port device team_slave_0 added [ 407.124673][ T3856] hsr_slave_0: left promiscuous mode [ 407.139126][ T3856] hsr_slave_1: left promiscuous mode [ 407.156601][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.164591][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.253213][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.261288][ T3856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.358285][ T3856] veth1_macvtap: left promiscuous mode [ 407.364237][ T3856] veth0_macvtap: left promiscuous mode [ 407.370282][ T3856] veth1_vlan: left promiscuous mode [ 407.376916][ T3856] veth0_vlan: left promiscuous mode [ 407.436473][ T7863] loop2: detected capacity change from 0 to 512 [ 407.596039][ T7863] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.646: casefold flag without casefold feature [ 407.611427][ T7863] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.646: couldn't read orphan inode 15 (err -117) [ 407.625823][ T7863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.816427][ T29] audit: type=1800 audit(1733396537.867:646): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.646" name="file1" dev="loop2" ino=19 res=0 errno=0 [ 407.996757][ T4006] ===================================================== [ 408.004335][ T4006] BUG: KMSAN: uninit-value in nci_ntf_packet+0x1a36/0x3ce0 [ 408.012431][ T4006] nci_ntf_packet+0x1a36/0x3ce0 [ 408.017472][ T4006] nci_rx_work+0x408/0x6f0 [ 408.022249][ T4006] process_scheduled_works+0xae0/0x1c40 [ 408.028030][ T4006] worker_thread+0xea7/0x14f0 [ 408.033070][ T4006] kthread+0x3e2/0x540 [ 408.037311][ T4006] ret_from_fork+0x6d/0x90 [ 408.042200][ T4006] ret_from_fork_asm+0x1a/0x30 [ 408.047194][ T4006] [ 408.049614][ T4006] Uninit was created at: [ 408.054263][ T4006] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 408.060491][ T4006] kmalloc_reserve+0x13d/0x4a0 [ 408.065424][ T4006] __alloc_skb+0x363/0x7b0 [ 408.070008][ T4006] virtual_ncidev_write+0x67/0x380 [ 408.075547][ T4006] vfs_write+0x48a/0x1540 [ 408.080076][ T4006] ksys_write+0x240/0x4b0 [ 408.085687][ T4006] __x64_sys_write+0x93/0xe0 [ 408.091735][ T4006] x64_sys_call+0x3161/0x3c30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.096636][ T4006] do_syscall_64+0xcd/0x1e0 [ 408.101747][ T4006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.107856][ T4006] [ 408.110546][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: kworker/u8:16 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 408.121793][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 408.132478][ T4006] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 408.138293][ T4006] ===================================================== [ 408.145479][ T4006] Disabling lock debugging due to kernel taint [ 408.151966][ T4006] Kernel panic - not syncing: kmsan.panic set ... [ 408.158541][ T4006] CPU: 1 UID: 0 PID: 4006 Comm: kworker/u8:16 Tainted: G B 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 408.171184][ T4006] Tainted: [B]=BAD_PAGE [ 408.175436][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 408.185651][ T4006] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 408.191444][ T4006] Call Trace: [ 408.194848][ T4006] [ 408.197879][ T4006] dump_stack_lvl+0x216/0x2d0 [ 408.202768][ T4006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 408.208764][ T4006] dump_stack+0x1e/0x24 [ 408.213109][ T4006] panic+0x4e2/0xcf0 [ 408.217193][ T4006] ? kmsan_get_metadata+0xd1/0x1c0 [ 408.222491][ T4006] kmsan_report+0x2c7/0x2d0 [ 408.227157][ T4006] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 408.233180][ T4006] ? __msan_warning+0x95/0x120 [ 408.238147][ T4006] ? nci_ntf_packet+0x1a36/0x3ce0 [ 408.243341][ T4006] ? nci_rx_work+0x408/0x6f0 [ 408.248129][ T4006] ? process_scheduled_works+0xae0/0x1c40 [ 408.254083][ T4006] ? worker_thread+0xea7/0x14f0 [ 408.259170][ T4006] ? kthread+0x3e2/0x540 [ 408.263602][ T4006] ? ret_from_fork+0x6d/0x90 [ 408.268374][ T4006] ? ret_from_fork_asm+0x1a/0x30 [ 408.273535][ T4006] ? ret_from_fork_asm+0x1a/0x30 [ 408.278711][ T4006] ? kmsan_get_metadata+0x13e/0x1c0 [ 408.284100][ T4006] ? kmsan_get_metadata+0x13e/0x1c0 [ 408.289472][ T4006] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 408.296040][ T4006] ? kmsan_get_metadata+0x13e/0x1c0 [ 408.301419][ T4006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 408.307419][ T4006] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 408.313451][ T4006] ? kmsan_get_metadata+0x13e/0x1c0 [ 408.318840][ T4006] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 408.325419][ T4006] ? kmsan_get_metadata+0x13e/0x1c0 [ 408.330797][ T4006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 408.336793][ T4006] __msan_warning+0x95/0x120 [ 408.341588][ T4006] nci_ntf_packet+0x1a36/0x3ce0 [ 408.346618][ T4006] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 408.353172][ T4006] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 408.359467][ T4006] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 408.365454][ T4006] nci_rx_work+0x408/0x6f0 [ 408.370085][ T4006] ? __pfx_nci_rx_work+0x10/0x10 [ 408.375257][ T4006] process_scheduled_works+0xae0/0x1c40 [ 408.381080][ T4006] worker_thread+0xea7/0x14f0 [ 408.386012][ T4006] kthread+0x3e2/0x540 [ 408.390255][ T4006] ? __pfx_worker_thread+0x10/0x10 [ 408.395601][ T4006] ? __pfx_kthread+0x10/0x10 [ 408.400386][ T4006] ret_from_fork+0x6d/0x90 [ 408.405001][ T4006] ? __pfx_kthread+0x10/0x10 [ 408.409777][ T4006] ret_from_fork_asm+0x1a/0x30 [ 408.414773][ T4006] [ 408.418205][ T4006] Kernel Offset: disabled [ 408.422605][ T4006] Rebooting in 86400 seconds..