last executing test programs: 4m1.385247825s ago: executing program 4 (id=175): socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0xfffffffe) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="f2f64405eeca36ed9c5e40488000", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4m1.148922028s ago: executing program 4 (id=178): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) eventfd2(0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000540)={[{@noauto_da_alloc}, {@grpquota}, {@grpjquota}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}, {@quota}, {@minixdf}, {@nogrpid}, {@user_xattr}]}, 0x81, 0x601, &(0x7f00000011c0)="$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") 3m59.954241986s ago: executing program 4 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e42400d0bb7d47acb2a2357bfbfc016f"}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3m59.106579092s ago: executing program 4 (id=193): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="be4f39", 0x3) 3m57.474189566s ago: executing program 4 (id=204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "e42400d0bb7d47acb2a2357bfbfc016f"}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3m55.63888357s ago: executing program 4 (id=212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) shutdown(r0, 0x1) 3m54.188458471s ago: executing program 32 (id=212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040000) shutdown(r0, 0x1) 2m56.729693876s ago: executing program 1 (id=704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x7fffffe, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) 2m49.144621179s ago: executing program 1 (id=780): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m48.95040556s ago: executing program 1 (id=782): socket$nl_xfrm(0x10, 0x3, 0x6) listen(0xffffffffffffffff, 0xfffffffe) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2f64405eeca36ed9c5e40", 0xb, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m48.735110059s ago: executing program 1 (id=786): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="be4f39", 0x3) 2m48.11041831s ago: executing program 1 (id=792): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m47.471141182s ago: executing program 1 (id=800): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) 2m47.105095748s ago: executing program 33 (id=800): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="8df5863a27", 0x8600}], 0x1, 0x7a00, 0x0, 0x3) 2m42.736617452s ago: executing program 0 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 2m42.60791139s ago: executing program 0 (id=859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0xbd5, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @lsm=0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r0, 0x0, 0x0, 0x0, 0x10, 0x3b7}, 0x94) 2m42.588918917s ago: executing program 0 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000004000000ff0f000007", @ANYRES8=r0, @ANYRESDEC, @ANYRES16=r1, @ANYBLOB="72064203262a77634bc4da3213d6a49c00e6308ff9ae6083a6d7b616469583b6e3c9d7b7c82fc3ceb2bfdc08df44e7d64c7c59eaf2c825de888597d911", @ANYRESDEC], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r2}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0xf}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m42.519116522s ago: executing program 0 (id=861): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000340)="be4f39", 0x3) 2m42.241498209s ago: executing program 0 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2m42.057326149s ago: executing program 5 (id=864): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 2m41.885918929s ago: executing program 5 (id=867): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 2m41.857266199s ago: executing program 0 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 2m41.515632738s ago: executing program 34 (id=868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 2m41.506205087s ago: executing program 5 (id=872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x5e}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 2m41.370881065s ago: executing program 5 (id=873): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@dioread_lock}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r0, &(0x7f0000000340)="be4f39", 0x3) 2m40.790931411s ago: executing program 5 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xffffffffffffffe1, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000, 0x0, 0x0, &(0x7f0000000400)="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"}, 0xf) 2m39.990314069s ago: executing program 5 (id=884): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 2m39.719416904s ago: executing program 35 (id=884): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m14.458320158s ago: executing program 2 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) unshare(0x28000600) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m14.186438817s ago: executing program 2 (id=1688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000895}, 0x44094) 1m13.893555128s ago: executing program 2 (id=1691): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m13.568607758s ago: executing program 2 (id=1694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f800"], 0xf8}}, 0x0) 1m13.388432937s ago: executing program 2 (id=1696): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 1m13.057563172s ago: executing program 2 (id=1700): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 58.002858246s ago: executing program 36 (id=1700): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.875822007s ago: executing program 8 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) close_range(r2, 0xffffffffffffffff, 0x10000000000000) 1.690020212s ago: executing program 8 (id=2457): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) ppoll(&(0x7f00000003c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 1.628495174s ago: executing program 6 (id=2458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0) 1.583209949s ago: executing program 3 (id=2459): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_uring_setup(0x7082, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x189000, 0x15) pread64(r1, 0x0, 0x0, 0x200) 1.483740797s ago: executing program 3 (id=2461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c8c044000000010000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x404880c}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800800034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.455159089s ago: executing program 6 (id=2462): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interlea']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 1.312827727s ago: executing program 3 (id=2464): accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='qdisc_destroy\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x1e, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 1.296796249s ago: executing program 6 (id=2465): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.102752845s ago: executing program 3 (id=2468): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 1.042616758s ago: executing program 6 (id=2469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, 0x0}, &(0x7f0000000600)=0x10) 992.102753ms ago: executing program 3 (id=2470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 973.127863ms ago: executing program 9 (id=2471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 866.634754ms ago: executing program 6 (id=2472): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0) 866.38065ms ago: executing program 7 (id=2473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 794.623686ms ago: executing program 9 (id=2474): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 708.725934ms ago: executing program 7 (id=2475): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) 700.564366ms ago: executing program 6 (id=2476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000037c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5319) 639.109244ms ago: executing program 8 (id=2477): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 586.612611ms ago: executing program 9 (id=2478): accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='qdisc_destroy\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socket(0x1e, 0x4, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0xe, 0xffffffffffffffff, 0xffffffff}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus/file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) 528.703835ms ago: executing program 8 (id=2479): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="239b3c41b852eb72d472253952ad4df434f5a6fbbbdcbd94dad42ca672a9abeefaa6d1dd9d3267e5a7ed8199e0e85ad390af52d84a0baee69197f20edf8e2a4fb12a62006212e9709580f30995", 0x4d}], 0x1) ioctl(r0, 0x1, &(0x7f0000000080)) 458.124316ms ago: executing program 7 (id=2480): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 350.44043ms ago: executing program 3 (id=2481): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) futex_waitv(&(0x7f0000000e40)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) 346.177397ms ago: executing program 9 (id=2482): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x1, 0x2, 0x2, 0x5}, 0x20) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) 252.305118ms ago: executing program 7 (id=2483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f0000000400)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 198.538209ms ago: executing program 8 (id=2484): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x8, 0x3a, '+', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x16]}, 0x2a) 165.126586ms ago: executing program 7 (id=2485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 123.795661ms ago: executing program 9 (id=2486): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}, 0x1, 0x2}, 0x0) 34.370609ms ago: executing program 8 (id=2487): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") statfs(0x0, &(0x7f0000000880)=""/141) 18.094784ms ago: executing program 7 (id=2488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) 0s ago: executing program 9 (id=2489): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): omm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.724419][ T30] audit: type=1326 audit(1764098446.404:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.761862][ T30] audit: type=1326 audit(1764098446.414:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.785593][ T30] audit: type=1326 audit(1764098446.414:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.810077][ T30] audit: type=1326 audit(1764098446.414:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.833370][ T30] audit: type=1326 audit(1764098446.414:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.877694][ T6056] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 250.901530][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1128'. [ 250.935044][ T30] audit: type=1326 audit(1764098446.414:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 250.958834][ T30] audit: type=1326 audit(1764098446.454:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9195 comm="syz.6.1125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 251.046879][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1129'. [ 251.087552][ T5991] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 251.141048][ T9207] loop6: detected capacity change from 0 to 512 [ 251.189970][ T9207] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1130: bg 0: block 5: invalid block bitmap [ 251.228944][ T9207] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 251.238427][ T9207] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1130: invalid indirect mapped block 3 (level 2) [ 251.266748][ T9207] EXT4-fs (loop6): 2 truncates cleaned up [ 251.278543][ T9207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.402227][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.771359][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1140'. [ 251.847645][ T9232] netlink: 'syz.7.1141': attribute type 1 has an invalid length. [ 251.856208][ T9232] netlink: 'syz.7.1141': attribute type 4 has an invalid length. [ 251.877628][ T9232] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1141'. [ 252.049191][ T9239] loop8: detected capacity change from 0 to 512 [ 252.079806][ T9240] loop6: detected capacity change from 0 to 2048 [ 252.097119][ T9240] EXT4-fs: Ignoring removed bh option [ 252.179770][ T9239] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1145: bg 0: block 5: invalid block bitmap [ 252.197552][ T9239] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 252.210602][ T9240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.232967][ T9239] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1145: invalid indirect mapped block 3 (level 2) [ 252.253167][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1143'. [ 252.278619][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1143'. [ 252.297208][ T9239] EXT4-fs (loop8): 2 truncates cleaned up [ 252.307500][ T9240] netlink: 'syz.6.1143': attribute type 6 has an invalid length. [ 252.317575][ T9239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.438616][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.490298][ T6056] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 252.595566][ T9254] __nla_validate_parse: 2 callbacks suppressed [ 252.595588][ T9254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1149'. [ 252.839213][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1153'. [ 252.976279][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.454363][ T9276] netlink: 'syz.7.1159': attribute type 1 has an invalid length. [ 253.485096][ T9276] netlink: 'syz.7.1159': attribute type 4 has an invalid length. [ 253.494103][ T9276] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.1159'. [ 253.662839][ T9280] loop7: detected capacity change from 0 to 512 [ 253.710877][ T9280] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1161: bg 0: block 5: invalid block bitmap [ 253.760111][ T9280] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 253.831688][ T9280] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1161: invalid indirect mapped block 3 (level 2) [ 253.889962][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1164'. [ 253.902506][ T5991] hid_parser_main: 34 callbacks suppressed [ 253.902529][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 253.917107][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 253.924946][ T9280] EXT4-fs (loop7): 2 truncates cleaned up [ 253.942730][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 254.002149][ T9280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.015140][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 254.023029][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 254.031197][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 254.048311][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 254.084548][ T5991] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 254.130074][ T8519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.139010][ T9290] loop3: detected capacity change from 0 to 2048 [ 254.146197][ T5991] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 254.163885][ T9290] EXT4-fs: Ignoring removed bh option [ 254.217811][ T9290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.258052][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 254.269090][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 254.279591][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 254.297221][ T9290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1165'. [ 254.306308][ T9290] netlink: 'syz.3.1165': attribute type 6 has an invalid length. [ 254.718033][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1172'. [ 254.939588][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1175'. [ 255.049418][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.201792][ T9316] netlink: 'syz.7.1176': attribute type 1 has an invalid length. [ 255.239400][ T9316] netlink: 'syz.7.1176': attribute type 4 has an invalid length. [ 255.298497][ T9318] loop3: detected capacity change from 0 to 512 [ 255.355635][ T9318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1177: bg 0: block 5: invalid block bitmap [ 255.441116][ T9318] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 255.476985][ T9318] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1177: invalid indirect mapped block 3 (level 2) [ 255.523166][ T9318] EXT4-fs (loop3): 2 truncates cleaned up [ 255.533674][ T9318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.595032][ T9318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.816028][ T5829] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 255.835732][ T5829] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 255.877660][ T5829] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 255.994896][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.004387][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.510156][ T6056] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 256.519142][ T9172] Set syz1 is full, maxelem 65536 reached [ 256.595296][ T9349] validate_nla: 2 callbacks suppressed [ 256.595317][ T9349] netlink: 'syz.6.1190': attribute type 1 has an invalid length. [ 256.655325][ T9354] netlink: 'syz.6.1190': attribute type 1 has an invalid length. [ 256.664672][ T9349] netlink: 'syz.6.1190': attribute type 4 has an invalid length. [ 256.698970][ T9354] netlink: 'syz.6.1190': attribute type 4 has an invalid length. [ 257.404966][ T5829] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 257.823084][ T9395] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 257.847424][ T9395] netlink: 'syz.2.1212': attribute type 4 has an invalid length. [ 257.864000][ T9395] __nla_validate_parse: 8 callbacks suppressed [ 257.864018][ T9395] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1212'. [ 257.888166][ T9397] netlink: 'syz.7.1213': attribute type 13 has an invalid length. [ 257.900372][ T9398] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 257.914278][ T9398] netlink: 'syz.2.1212': attribute type 4 has an invalid length. [ 257.928328][ T9398] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1212'. [ 258.335855][ T5829] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 258.789408][ T9428] netlink: 'syz.2.1225': attribute type 1 has an invalid length. [ 258.807635][ T9428] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1225'. [ 258.832012][ T9428] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1225'. [ 258.954834][ T9433] loop2: detected capacity change from 0 to 512 [ 258.990857][ T9433] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1228: bg 0: block 5: invalid block bitmap [ 259.009986][ T9433] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 259.019814][ T9433] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1228: invalid indirect mapped block 3 (level 2) [ 259.037354][ T9433] EXT4-fs (loop2): 2 truncates cleaned up [ 259.057572][ T9433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.079330][ T9433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.465844][ T5980] hid_parser_main: 30 callbacks suppressed [ 259.465869][ T5980] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 259.491634][ T5980] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 259.511351][ T5980] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 259.521492][ T5980] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 260.110194][ T9459] loop2: detected capacity change from 0 to 512 [ 260.148742][ T9459] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1240: bg 0: block 5: invalid block bitmap [ 260.167509][ T9459] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 260.185838][ T9459] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1240: invalid indirect mapped block 3 (level 2) [ 260.216742][ T9459] EXT4-fs (loop2): 2 truncates cleaned up [ 260.274677][ T9459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.299789][ T6434] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 260.310549][ T6434] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 260.318753][ T6434] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x3 [ 260.332492][ T6434] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 260.345761][ T9459] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.029304][ T9494] loop7: detected capacity change from 0 to 512 [ 261.048686][ T9494] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1256: bg 0: block 5: invalid block bitmap [ 261.062084][ T9494] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 261.072128][ T9494] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1256: invalid indirect mapped block 3 (level 2) [ 261.086592][ T9494] EXT4-fs (loop7): 2 truncates cleaned up [ 261.094715][ T9494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.154482][ T9494] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.319523][ T6434] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 261.339782][ T6434] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 261.364083][ T6434] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 261.374639][ T6434] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 262.166347][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 262.166369][ T30] audit: type=1326 audit(1764098457.894:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.8.1265" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53018f749 code=0x0 [ 263.641660][ T9530] loop8: detected capacity change from 0 to 128 [ 263.714470][ T76] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 263.804906][ T9374] Set syz1 is full, maxelem 65536 reached [ 264.636911][ T9565] loop7: detected capacity change from 0 to 128 [ 266.018283][ T9578] loop8: detected capacity change from 0 to 512 [ 266.040818][ T9581] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1290'. [ 266.080155][ T9581] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1290'. [ 266.094378][ T9578] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1281: bg 0: block 5: invalid block bitmap [ 266.160029][ T9578] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 266.208025][ T9578] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1281: invalid indirect mapped block 3 (level 2) [ 266.208472][ T9587] loop7: detected capacity change from 0 to 2048 [ 266.233207][ T9578] EXT4-fs (loop8): 2 truncates cleaned up [ 266.251925][ T9587] EXT4-fs: Ignoring removed bh option [ 266.278701][ T9578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.303530][ T9578] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.339232][ T9587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.388084][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1292'. [ 266.427940][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1292'. [ 266.473242][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1292'. [ 266.531508][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1292'. [ 266.549689][ T9587] validate_nla: 3 callbacks suppressed [ 266.549711][ T9587] netlink: 'syz.7.1292': attribute type 6 has an invalid length. [ 266.681454][ T6487] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 266.752920][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1300'. [ 266.774973][ T8519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.987154][ T9630] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1307'. [ 267.010993][ T9630] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1307'. [ 267.029722][ T9632] loop8: detected capacity change from 0 to 512 [ 267.070018][ T9632] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1308: bg 0: block 5: invalid block bitmap [ 267.083148][ T9632] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 267.096996][ T9632] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1308: invalid indirect mapped block 3 (level 2) [ 267.111237][ T9632] EXT4-fs (loop8): 2 truncates cleaned up [ 267.119312][ T9632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.183083][ T9632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.718231][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1317'. [ 268.290068][ T6178] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 269.408389][ T30] audit: type=1326 audit(1764098465.144:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.8.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 269.491828][ T30] audit: type=1326 audit(1764098465.174:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.8.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 269.553486][ T30] audit: type=1326 audit(1764098465.174:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.8.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 269.622688][ T30] audit: type=1326 audit(1764098465.174:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.8.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 270.198433][ T6088] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 270.490876][ T9744] loop3: detected capacity change from 0 to 1024 [ 271.432336][ T9744] ext2: Unknown parameter 'fowner<00000000000000000000' [ 271.547901][ T9751] __nla_validate_parse: 17 callbacks suppressed [ 271.547924][ T9751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1357'. [ 271.904078][ T9757] loop6: detected capacity change from 0 to 128 [ 272.759717][ T1148] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 273.246254][ T9803] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 273.263163][ T9803] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1380'. [ 273.307611][ T9803] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 273.315672][ T9803] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1380'. [ 274.211539][ T9822] veth1_to_bond: Caught tx_queue_len zero misconfig [ 274.551608][ T9830] loop6: detected capacity change from 0 to 512 [ 274.648283][ T9830] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1393: bg 0: block 5: invalid block bitmap [ 274.853637][ T9830] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 274.866056][ T9830] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1393: invalid indirect mapped block 3 (level 2) [ 274.899146][ T9830] EXT4-fs (loop6): 2 truncates cleaned up [ 274.913793][ T9830] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.948717][ T9830] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.490446][ T9854] loop7: detected capacity change from 0 to 2048 [ 275.497986][ T9854] EXT4-fs: Ignoring removed bh option [ 275.534412][ T9854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.572258][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.594534][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.627996][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1402'. [ 275.637230][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.656116][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.666636][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1402'. [ 275.693493][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.710464][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1402'. [ 275.723146][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.748775][ T9854] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1402'. [ 275.761554][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.780118][ T9854] netlink: 'syz.7.1402': attribute type 6 has an invalid length. [ 275.796505][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.816086][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.832904][ T46] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x0 [ 275.866698][ T46] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.945840][ T8519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.251083][ T61] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 276.389455][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1413'. [ 276.411709][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1413'. [ 276.484447][ T9888] loop3: detected capacity change from 0 to 512 [ 276.494625][ T9888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.529961][ T9888] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1415: iget: bad i_size value: 38620345925642 [ 276.588132][ T9888] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1415: couldn't read orphan inode 15 (err -117) [ 276.624000][ T9888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.714919][ T30] audit: type=1800 audit(1764098472.444:1235): pid=9888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1415" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 276.782456][ T9897] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1418'. [ 276.819715][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.853941][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1418'. [ 276.986762][ T6434] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.225723][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 277.440707][ T9917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1428'. [ 277.471118][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 277.661750][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1432'. [ 277.681287][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 277.780468][ T5895] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.811077][ T3480] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 278.310147][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1444'. [ 278.320509][ T9952] loop3: detected capacity change from 0 to 2048 [ 278.330446][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1444'. [ 278.347942][ T9952] EXT4-fs: Ignoring removed bh option [ 278.469305][ T9952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.570580][ T9952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1443'. [ 278.601262][ T9952] netlink: 'syz.3.1443': attribute type 6 has an invalid length. [ 278.701247][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.774697][ T9965] loop6: detected capacity change from 0 to 512 [ 278.848131][ T9965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.884783][ T9965] EXT4-fs (loop6): shut down requested (0) [ 278.952991][ T9968] loop7: detected capacity change from 0 to 512 [ 278.976782][ T5895] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 278.994142][ T9968] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1448: bg 0: block 5: invalid block bitmap [ 279.057900][ T9968] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 279.162961][ T9968] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1448: invalid indirect mapped block 3 (level 2) [ 279.195534][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.219254][ T9968] EXT4-fs (loop7): 2 truncates cleaned up [ 279.224851][ T9972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.245289][ T9968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.360476][ T9968] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.605965][ T9972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.957154][ T9972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.006028][ T9999] loop3: detected capacity change from 0 to 2048 [ 280.027616][ T9999] EXT4-fs: Ignoring removed bh option [ 280.110799][ T5928] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 280.117750][ T9999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.221716][ T9972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.261726][ T9999] netlink: 'syz.3.1458': attribute type 6 has an invalid length. [ 280.379522][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.459184][T10015] netlink: 'syz.8.1466': attribute type 1 has an invalid length. [ 280.468398][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.496153][T10015] netlink: 'syz.8.1466': attribute type 4 has an invalid length. [ 280.509208][T10015] netlink: 'syz.8.1466': attribute type 1 has an invalid length. [ 280.521714][T10015] netlink: 'syz.8.1466': attribute type 4 has an invalid length. [ 280.529755][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.593482][ T6487] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.699394][ T6116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.297976][T10044] netlink: 'syz.8.1478': attribute type 1 has an invalid length. [ 281.309892][T10044] netlink: 'syz.8.1478': attribute type 1 has an invalid length. [ 281.691051][T10056] loop2: detected capacity change from 0 to 512 [ 281.738892][T10056] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1486: bg 0: block 5: invalid block bitmap [ 281.785815][T10056] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 281.812466][T10056] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1486: invalid indirect mapped block 3 (level 2) [ 281.860131][ T30] audit: type=1326 audit(1764098477.594:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 281.885505][ T30] audit: type=1326 audit(1764098477.594:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 281.912351][T10056] EXT4-fs (loop2): 2 truncates cleaned up [ 281.920595][T10056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.937113][T10066] __nla_validate_parse: 21 callbacks suppressed [ 281.937135][T10066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1489'. [ 281.937131][ T30] audit: type=1326 audit(1764098477.594:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 281.937181][ T30] audit: type=1326 audit(1764098477.594:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 281.943432][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1489'. [ 281.980608][T10056] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.020332][ T30] audit: type=1326 audit(1764098477.594:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 282.046476][ T30] audit: type=1326 audit(1764098477.594:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10062 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 282.096994][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1489'. [ 282.116540][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1489'. [ 282.131324][T10069] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1491'. [ 282.186769][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1491'. [ 282.405620][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'. [ 282.434114][T10080] netlink: 'syz.8.1495': attribute type 1 has an invalid length. [ 282.478995][T10080] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1495'. [ 282.480125][ T6056] hid_parser_main: 128 callbacks suppressed [ 282.480145][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.526934][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.526953][T10080] netlink: 'syz.8.1495': attribute type 1 has an invalid length. [ 282.526975][T10080] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1495'. [ 282.554685][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.584554][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.619133][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.636540][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.665847][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.688704][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.704723][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.748236][ T6056] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 282.778750][ T6056] hid-generic 0003:0004:0000.0022: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 283.233636][T10101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1507'. [ 284.667326][ T5979] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 284.827277][ T5979] usb 9-1: device descriptor read/64, error -71 [ 285.066935][ T5979] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 285.206610][ T5979] usb 9-1: device descriptor read/64, error -71 [ 285.357341][ T5979] usb usb9-port1: attempt power cycle [ 285.609272][T10173] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 285.622319][T10173] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 285.726891][ T5979] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 285.787301][ T5979] usb 9-1: device descriptor read/8, error -71 [ 286.031266][ T5979] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 286.087307][ T5979] usb 9-1: device descriptor read/8, error -71 [ 286.207541][ T5979] usb usb9-port1: unable to enumerate USB device [ 286.510701][T10199] netlink: 'syz.6.1551': attribute type 1 has an invalid length. [ 286.536212][T10199] netlink: 'syz.6.1551': attribute type 1 has an invalid length. [ 287.229286][T10220] __nla_validate_parse: 22 callbacks suppressed [ 287.229310][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1560'. [ 287.249519][T10221] loop8: detected capacity change from 0 to 128 [ 287.525713][T10226] netlink: 'syz.8.1564': attribute type 1 has an invalid length. [ 287.582339][T10226] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1564'. [ 287.632597][T10231] netlink: 'syz.8.1564': attribute type 1 has an invalid length. [ 287.676685][T10231] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1564'. [ 287.847298][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1567'. [ 287.874161][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1567'. [ 287.893879][T10237] loop2: detected capacity change from 0 to 2048 [ 287.969229][T10237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.996673][T10237] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.194209][ T8883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.238740][T10249] loop8: detected capacity change from 0 to 512 [ 288.247228][T10249] ext4: Unknown parameter 'seclabel' [ 288.472686][T10255] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1576'. [ 288.729009][T10261] netlink: 'syz.8.1580': attribute type 1 has an invalid length. [ 288.778833][T10261] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1580'. [ 288.797252][T10268] netlink: 'syz.8.1580': attribute type 1 has an invalid length. [ 288.837586][T10265] loop7: detected capacity change from 0 to 512 [ 288.856089][T10268] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1580'. [ 288.924380][T10265] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1581: bg 0: block 5: invalid block bitmap [ 289.026307][T10265] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 289.105029][T10265] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1581: invalid indirect mapped block 3 (level 2) [ 289.117450][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1584'. [ 289.158256][T10265] EXT4-fs (loop7): 2 truncates cleaned up [ 289.166365][T10265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.166565][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1584'. [ 289.196359][T10265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.554631][T10286] loop2: detected capacity change from 0 to 128 [ 289.604444][T10286] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.626508][T10286] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.855516][ T8883] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.080280][T10303] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 290.101330][T10303] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 290.673060][T10318] loop6: detected capacity change from 0 to 2048 [ 290.735983][T10318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.826649][T10318] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.038829][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.076850][ T13] bridge_slave_1: left allmulticast mode [ 292.082582][ T13] bridge_slave_1: left promiscuous mode [ 292.116938][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.132673][T10360] loop2: detected capacity change from 0 to 2048 [ 292.168567][T10360] EXT4-fs: Ignoring removed bh option [ 292.198053][ T13] bridge_slave_0: left allmulticast mode [ 292.206233][ T13] bridge_slave_0: left promiscuous mode [ 292.235140][T10360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.256747][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.423242][T10372] loop7: detected capacity change from 0 to 512 [ 292.478584][ T8883] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.554184][T10372] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1630: bg 0: block 5: invalid block bitmap [ 292.593261][T10372] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 292.642365][T10372] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1630: invalid indirect mapped block 3 (level 2) [ 292.656909][T10372] EXT4-fs (loop7): 2 truncates cleaned up [ 292.664801][T10372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.756576][T10372] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.859687][T10380] __nla_validate_parse: 11 callbacks suppressed [ 292.859712][T10380] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1633'. [ 292.938891][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 292.949602][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 292.990896][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1635'. [ 293.002919][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1635'. [ 293.699479][T10390] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 293.731363][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.742421][T10390] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1638'. [ 293.771021][T10393] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 293.781176][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.801875][T10393] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1638'. [ 293.823531][ T13] bond0 (unregistering): Released all slaves [ 293.897738][ T6009] infiniband syb2: ib_query_port failed (-19) [ 294.199841][ T30] audit: type=1326 audit(1764098489.934:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.219944][T10399] loop3: detected capacity change from 0 to 2048 [ 294.271144][ T30] audit: type=1326 audit(1764098489.954:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.278710][T10399] EXT4-fs: Ignoring removed bh option [ 294.297716][ T30] audit: type=1326 audit(1764098489.954:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.360713][ T30] audit: type=1326 audit(1764098489.964:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.419759][T10399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.458601][T10409] loop7: detected capacity change from 0 to 128 [ 294.499255][ T30] audit: type=1326 audit(1764098489.964:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.567813][ T30] audit: type=1326 audit(1764098489.964:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.598844][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.669985][ T30] audit: type=1326 audit(1764098489.974:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.724485][ T30] audit: type=1326 audit(1764098489.974:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.758456][ T30] audit: type=1326 audit(1764098489.974:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.805986][ T13] hsr_slave_0: left promiscuous mode [ 294.833992][ T30] audit: type=1326 audit(1764098489.974:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10400 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340a38f749 code=0x7ffc0000 [ 294.861106][ T13] hsr_slave_1: left promiscuous mode [ 294.878838][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.905738][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.953450][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.976772][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.049552][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1650'. [ 295.061033][ T13] veth1_macvtap: left promiscuous mode [ 295.085588][ T13] veth0_macvtap: left promiscuous mode [ 295.095111][ T13] veth1_vlan: left promiscuous mode [ 295.134600][T10430] netlink: 'syz.7.1651': attribute type 1 has an invalid length. [ 295.141092][ T13] veth0_vlan: left promiscuous mode [ 295.171590][T10430] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1651'. [ 295.198664][T10431] netlink: 'syz.7.1651': attribute type 1 has an invalid length. [ 295.236715][T10431] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1651'. [ 295.986042][T10447] loop7: detected capacity change from 0 to 2048 [ 296.002713][T10447] EXT4-fs: Ignoring removed bh option [ 296.004582][T10449] loop3: detected capacity change from 0 to 128 [ 296.070179][T10447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.210167][ T8519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.500171][ T13] team0 (unregistering): Port device team_slave_1 removed [ 296.616176][T10460] netlink: 'syz.7.1663': attribute type 1 has an invalid length. [ 296.617739][ T13] team0 (unregistering): Port device team_slave_0 removed [ 296.626332][T10460] netlink: 'syz.7.1663': attribute type 1 has an invalid length. [ 297.489726][T10449] tipc: Started in network mode [ 297.508326][T10449] tipc: Node identity 4, cluster identity 4711 [ 297.514550][T10449] tipc: Node number set to 4 [ 297.985253][T10485] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 298.006819][T10485] __nla_validate_parse: 9 callbacks suppressed [ 298.006841][T10485] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1674'. [ 298.047952][T10485] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 298.064121][T10485] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1674'. [ 299.277520][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1681'. [ 299.316503][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1681'. [ 299.348055][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1681'. [ 299.378416][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1681'. [ 299.607855][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1684'. [ 299.619438][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1685'. [ 299.656874][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 299.897751][T10521] netlink: 'syz.8.1689': attribute type 1 has an invalid length. [ 299.905740][T10521] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1689'. [ 299.928019][T10521] netlink: 'syz.8.1689': attribute type 1 has an invalid length. [ 299.985044][T10524] loop3: detected capacity change from 0 to 512 [ 300.086606][T10524] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1690: bg 0: block 5: invalid block bitmap [ 300.127926][T10524] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 300.137647][T10524] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1690: invalid indirect mapped block 3 (level 2) [ 300.153747][T10524] EXT4-fs (loop3): 2 truncates cleaned up [ 300.164291][T10524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.182759][T10524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.018751][T10549] netlink: 'syz.8.1702': attribute type 1 has an invalid length. [ 301.058135][T10549] netlink: 'syz.8.1702': attribute type 1 has an invalid length. [ 301.455286][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 301.455307][ T30] audit: type=1326 audit(1764098497.184:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.566788][ T30] audit: type=1326 audit(1764098497.184:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.640682][ T30] audit: type=1326 audit(1764098497.184:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.706934][ T30] audit: type=1326 audit(1764098497.224:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.760590][ T30] audit: type=1326 audit(1764098497.224:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.790073][T10569] loop7: detected capacity change from 0 to 512 [ 301.819629][ T30] audit: type=1326 audit(1764098497.244:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.857214][ T30] audit: type=1326 audit(1764098497.244:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10564 comm="syz.7.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 301.868540][T10569] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1710: bg 0: block 5: invalid block bitmap [ 302.068362][T10569] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 302.097417][T10569] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1710: invalid indirect mapped block 3 (level 2) [ 302.163276][T10569] EXT4-fs (loop7): 2 truncates cleaned up [ 302.232470][T10569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.378982][T10569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.971744][T10582] netlink: 'syz.7.1715': attribute type 1 has an invalid length. [ 303.001885][T10582] netlink: 'syz.7.1715': attribute type 1 has an invalid length. [ 303.049273][ T30] audit: type=1326 audit(1764098498.774:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 303.136493][ T30] audit: type=1326 audit(1764098498.774:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 303.219542][ T30] audit: type=1326 audit(1764098498.774:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10583 comm="syz.8.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 303.368719][T10592] syzkaller0: entered promiscuous mode [ 303.375576][T10592] syzkaller0: entered allmulticast mode [ 303.868020][T10610] __nla_validate_parse: 8 callbacks suppressed [ 303.868041][T10610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1726'. [ 303.875520][T10612] loop7: detected capacity change from 0 to 512 [ 303.928658][T10612] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1727: bg 0: block 5: invalid block bitmap [ 303.992438][T10612] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 304.028001][T10612] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1727: invalid indirect mapped block 3 (level 2) [ 304.042194][T10612] EXT4-fs (loop7): 2 truncates cleaned up [ 304.058904][T10612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.081957][T10612] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.850013][T10640] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1739'. [ 304.913993][T10642] loop3: detected capacity change from 0 to 512 [ 304.949232][T10642] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.989931][T10645] loop6: detected capacity change from 0 to 512 [ 305.042796][T10645] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1741: bg 0: block 5: invalid block bitmap [ 305.061351][T10642] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 305.082529][T10645] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 305.088257][T10642] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 305.105893][T10645] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1741: invalid indirect mapped block 3 (level 2) [ 305.119685][T10642] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 305.149822][T10645] EXT4-fs (loop6): 2 truncates cleaned up [ 305.198723][T10645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.289955][T10645] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.878313][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1753'. [ 305.891752][T10676] loop6: detected capacity change from 0 to 512 [ 305.968173][T10676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 306.070687][T10676] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.124679][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1755'. [ 306.135034][T10676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 306.755019][T10699] gretap1: entered promiscuous mode [ 306.978269][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1765'. [ 307.525642][T10723] loop7: detected capacity change from 0 to 764 [ 307.635172][T10723] rock: directory entry would overflow storage [ 307.667539][T10723] rock: sig=0x4f50, size=4, remaining=3 [ 307.696650][T10723] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 308.088308][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1778'. [ 308.114327][T10740] loop3: detected capacity change from 0 to 512 [ 308.174202][T10740] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1779: bg 0: block 5: invalid block bitmap [ 308.275231][T10740] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 308.339807][T10740] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1779: invalid indirect mapped block 3 (level 2) [ 308.419418][T10740] EXT4-fs (loop3): 2 truncates cleaned up [ 308.445622][T10740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.481867][T10744] loop8: detected capacity change from 0 to 512 [ 308.515237][T10744] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 308.537768][T10740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.630255][T10744] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1780: invalid indirect mapped block 4294967295 (level 0) [ 308.885219][T10744] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1780: invalid indirect mapped block 4294967295 (level 1) [ 308.966941][T10744] EXT4-fs (loop8): 1 orphan inode deleted [ 308.972828][T10744] EXT4-fs (loop8): 1 truncate cleaned up [ 309.000492][T10744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.185455][T10744] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.379170][T10770] netlink: 'syz.8.1786': attribute type 10 has an invalid length. [ 309.430837][T10773] netlink: 'syz.8.1786': attribute type 10 has an invalid length. [ 309.725188][T10770] team0: Failed to send options change via netlink (err -105) [ 309.770050][T10770] team0: Port device dummy0 added [ 309.828559][T10773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 309.940389][T10773] team0: Failed to send options change via netlink (err -105) [ 309.984882][T10773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 310.079212][T10773] team0: Port device dummy0 removed [ 310.178551][T10773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.259350][T10795] loop3: detected capacity change from 0 to 128 [ 310.453665][T10797] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1792'. [ 310.524425][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1792'. [ 310.729090][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 310.729110][ T30] audit: type=1326 audit(1764098506.464:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 310.851717][ T30] audit: type=1326 audit(1764098506.474:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 310.877340][ T30] audit: type=1326 audit(1764098506.474:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 310.911020][ T30] audit: type=1326 audit(1764098506.474:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 310.964609][ T30] audit: type=1326 audit(1764098506.474:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.002716][ T30] audit: type=1326 audit(1764098506.474:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.072495][ T30] audit: type=1326 audit(1764098506.474:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.256475][ T30] audit: type=1326 audit(1764098506.474:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.302660][T10815] gretap1: entered promiscuous mode [ 311.380346][ T30] audit: type=1326 audit(1764098506.474:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.423087][T10821] loop8: detected capacity change from 0 to 512 [ 311.454650][ T30] audit: type=1326 audit(1764098506.474:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10802 comm="syz.3.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 311.458506][T10818] loop3: detected capacity change from 0 to 2048 [ 311.530694][T10818] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.541820][T10823] loop7: detected capacity change from 0 to 512 [ 311.573657][T10821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.607477][T10823] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1803: bg 0: block 5: invalid block bitmap [ 311.627306][T10821] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.647382][T10823] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 311.653660][T10829] loop6: detected capacity change from 0 to 128 [ 311.676579][T10823] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1803: invalid indirect mapped block 3 (level 2) [ 311.693702][T10818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.737707][T10823] EXT4-fs (loop7): 2 truncates cleaned up [ 311.799685][T10823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.905680][T10823] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.946499][ T8769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.984260][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.174163][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 312.216658][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1807'. [ 313.064919][T10867] loop7: detected capacity change from 0 to 128 [ 313.077656][T10866] pimreg: entered allmulticast mode [ 313.102041][T10869] pimreg: left allmulticast mode [ 314.536275][T10901] loop8: detected capacity change from 0 to 128 [ 314.581007][T10901] tipc: Started in network mode [ 314.587447][T10901] tipc: Node identity 4, cluster identity 4711 [ 314.603047][T10901] tipc: Node number set to 4 [ 314.789788][T10907] loop6: detected capacity change from 0 to 512 [ 314.796294][T10911] netlink: 'syz.8.1839': attribute type 1 has an invalid length. [ 314.811386][T10911] netlink: 'syz.8.1839': attribute type 4 has an invalid length. [ 314.819779][T10911] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1839'. [ 314.831907][T10911] netlink: 'syz.8.1839': attribute type 1 has an invalid length. [ 314.841552][T10911] netlink: 'syz.8.1839': attribute type 4 has an invalid length. [ 314.849469][T10911] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1839'. [ 314.862326][T10907] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1837: bg 0: block 5: invalid block bitmap [ 314.897753][T10907] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 314.918011][T10907] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1837: invalid indirect mapped block 3 (level 2) [ 314.932512][T10907] EXT4-fs (loop6): 2 truncates cleaned up [ 314.940474][T10907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.980107][T10907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.235877][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 315.267444][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 315.281277][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1842'. [ 315.307623][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 315.663344][T10936] loop7: detected capacity change from 0 to 128 [ 315.699564][T10938] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 315.733951][T10938] netlink: 'syz.6.1850': attribute type 4 has an invalid length. [ 315.757675][T10938] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1850'. [ 315.778336][T10938] netlink: 'syz.6.1850': attribute type 1 has an invalid length. [ 315.786156][T10938] netlink: 'syz.6.1850': attribute type 4 has an invalid length. [ 315.814756][T10938] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.1850'. [ 315.989048][T10945] loop8: detected capacity change from 0 to 512 [ 316.039699][T10945] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1854: bg 0: block 5: invalid block bitmap [ 316.151293][T10945] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 316.213252][T10945] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1854: invalid indirect mapped block 3 (level 2) [ 316.267167][T10945] EXT4-fs (loop8): 2 truncates cleaned up [ 316.275112][T10945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.313895][T10958] loop6: detected capacity change from 0 to 128 [ 316.336493][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.351842][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.362032][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.370292][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.371687][T10945] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.387971][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.481652][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 316.481673][ T30] audit: type=1326 audit(1764098512.214:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.536208][ T30] audit: type=1326 audit(1764098512.254:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.570100][ T30] audit: type=1326 audit(1764098512.264:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.622469][ T30] audit: type=1326 audit(1764098512.264:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.683006][ T30] audit: type=1326 audit(1764098512.264:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.733756][ T30] audit: type=1326 audit(1764098512.264:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.795288][ T30] audit: type=1326 audit(1764098512.264:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.849554][ T30] audit: type=1326 audit(1764098512.264:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.893720][ T30] audit: type=1326 audit(1764098512.264:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 316.964660][ T30] audit: type=1326 audit(1764098512.264:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10963 comm="syz.3.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 317.022781][T10975] netlink: 'syz.8.1866': attribute type 1 has an invalid length. [ 317.052604][T10975] netlink: 'syz.8.1866': attribute type 4 has an invalid length. [ 317.083145][T10975] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1866'. [ 317.110285][T10976] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1866'. [ 317.140732][T10960] chnl_net:caif_netlink_parms(): no params data found [ 317.443579][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.638773][T10995] loop7: detected capacity change from 0 to 128 [ 317.681050][ T9755] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.792461][ T9755] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.901555][T11003] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1876'. [ 317.932953][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1877'. [ 317.937553][T11003] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1876'. [ 317.943336][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1877'. [ 317.970237][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.981054][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.997455][T10960] bridge_slave_0: entered allmulticast mode [ 318.005759][T10960] bridge_slave_0: entered promiscuous mode [ 318.012851][T11009] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1877'. [ 318.030033][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1877'. [ 318.042124][ T9755] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.133686][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.147650][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.154972][T10960] bridge_slave_1: entered allmulticast mode [ 318.163772][T10960] bridge_slave_1: entered promiscuous mode [ 318.236292][ T6434] hid_parser_main: 8 callbacks suppressed [ 318.236317][ T6434] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 318.252804][ T6434] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 318.260854][ T6434] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 318.287238][ T6434] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 318.351803][ T9755] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.466887][ T5834] Bluetooth: hci5: command tx timeout [ 318.476537][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.503088][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.739301][T10960] team0: Port device team_slave_0 added [ 318.762263][T11029] loop8: detected capacity change from 0 to 128 [ 318.837892][T10960] team0: Port device team_slave_1 added [ 319.024159][ T9755] bridge_slave_1: left allmulticast mode [ 319.033758][ T9755] bridge_slave_1: left promiscuous mode [ 319.058645][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.098419][ T9755] bridge_slave_0: left allmulticast mode [ 319.105845][ T9755] bridge_slave_0: left promiscuous mode [ 319.141392][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.613552][T11058] loop8: detected capacity change from 0 to 128 [ 319.770973][ T9755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.785689][ T9755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.800234][ T9755] bond0 (unregistering): Released all slaves [ 319.825737][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.835090][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.863587][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.941501][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.980085][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.039700][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.517924][T11089] loop6: detected capacity change from 0 to 128 [ 320.542414][T10960] hsr_slave_0: entered promiscuous mode [ 320.546741][ T5834] Bluetooth: hci5: command tx timeout [ 320.556785][T10960] hsr_slave_1: entered promiscuous mode [ 320.589592][T10960] debugfs: 'hsr0' already exists in 'hsr' [ 320.604995][T10960] Cannot create hsr debugfs directory [ 320.693588][ T9755] hsr_slave_0: left promiscuous mode [ 320.714035][ T9755] hsr_slave_1: left promiscuous mode [ 320.732555][ T9755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.749313][ T9755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.800696][ T9755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.813940][ T9755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.864526][ T9755] veth1_macvtap: left promiscuous mode [ 320.879910][ T9755] veth0_macvtap: left promiscuous mode [ 320.895895][ T9755] veth1_vlan: left promiscuous mode [ 320.912605][ T9755] veth0_vlan: left promiscuous mode [ 320.979640][T11102] loop7: detected capacity change from 0 to 512 [ 321.027268][T11102] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1918: bg 0: block 5: invalid block bitmap [ 321.089110][T11102] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 321.114122][T11102] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1918: invalid indirect mapped block 3 (level 2) [ 321.159159][T11102] EXT4-fs (loop7): 2 truncates cleaned up [ 321.167125][T11102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.201025][T11102] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.513770][T11117] __nla_validate_parse: 7 callbacks suppressed [ 321.513793][T11117] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1923'. [ 321.567413][T11119] loop7: detected capacity change from 0 to 128 [ 322.133902][ T9755] team0 (unregistering): Port device team_slave_1 removed [ 322.184390][ T9755] team0 (unregistering): Port device team_slave_0 removed [ 322.631935][ T5834] Bluetooth: hci5: command tx timeout [ 322.816969][T11135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1928'. [ 322.974056][T11141] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1932'. [ 323.073432][T11141] ip6gre1: entered promiscuous mode [ 323.082387][T11146] loop7: detected capacity change from 0 to 512 [ 323.114572][T11141] ip6gre1: entered allmulticast mode [ 323.154073][T11148] loop6: detected capacity change from 0 to 512 [ 323.191110][T11148] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1935: bg 0: block 5: invalid block bitmap [ 323.289130][T11148] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 323.303794][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1937'. [ 323.337570][T11148] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1935: invalid indirect mapped block 3 (level 2) [ 323.368322][T11148] EXT4-fs (loop6): 2 truncates cleaned up [ 323.378699][T11148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.409500][T11158] loop7: detected capacity change from 0 to 128 [ 323.413583][T11148] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.502424][T10960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 323.542708][T10960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 323.571927][T10960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 323.599189][T10960] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 323.834836][T11172] syzkaller0: entered promiscuous mode [ 323.840861][T11172] syzkaller0: entered allmulticast mode [ 324.256657][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1949'. [ 324.322343][T11194] loop8: detected capacity change from 0 to 128 [ 324.706827][ T5834] Bluetooth: hci5: command tx timeout [ 326.071504][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.153958][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.213101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.220386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.288238][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.295607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.740657][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1965'. [ 327.290326][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.581404][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 327.605586][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 327.637724][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1974'. [ 327.849523][T11264] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1977'. [ 327.969863][T10960] veth0_vlan: entered promiscuous mode [ 328.016417][T10960] veth1_vlan: entered promiscuous mode [ 328.047181][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1980'. [ 328.144196][T10960] veth0_macvtap: entered promiscuous mode [ 328.165782][T10960] veth1_macvtap: entered promiscuous mode [ 328.215398][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.263395][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.325126][T10777] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.343515][T10777] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.379129][T10777] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.403479][T10777] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.539614][T11281] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1985'. [ 328.568835][T11281] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1985'. [ 328.589490][T10780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.606644][T10780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.687606][T10777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.705705][T10777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.844746][T11291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1990'. [ 329.276189][T11307] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.1997'. [ 329.392064][T11310] program syz.8.1999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.402465][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 329.405231][ T30] audit: type=1326 audit(1764098525.134:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.480311][ T30] audit: type=1326 audit(1764098525.134:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.504260][ T30] audit: type=1326 audit(1764098525.134:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.561757][ T30] audit: type=1326 audit(1764098525.184:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.652914][ T30] audit: type=1326 audit(1764098525.184:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.711375][ T30] audit: type=1326 audit(1764098525.184:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.757470][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 329.793760][ T30] audit: type=1326 audit(1764098525.184:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.878178][ T30] audit: type=1326 audit(1764098525.184:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 329.961570][ T30] audit: type=1326 audit(1764098525.184:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.3.1998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 330.118909][T11334] loop8: detected capacity change from 0 to 164 [ 330.158294][T11334] Unable to read rock-ridge attributes [ 330.706603][T11358] loop8: detected capacity change from 0 to 128 [ 331.154273][T11372] batman_adv: batadv0: Adding interface: dummy0 [ 331.166538][T11372] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.234539][T11372] batman_adv: batadv0: Interface activated: dummy0 [ 331.565016][T11386] loop9: detected capacity change from 0 to 128 [ 331.637554][T11386] tipc: Started in network mode [ 331.667003][T11386] tipc: Node identity 4, cluster identity 4711 [ 331.673241][T11386] tipc: Node number set to 4 [ 333.831770][T11419] __nla_validate_parse: 9 callbacks suppressed [ 333.831813][T11419] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2048'. [ 333.900688][T11422] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2048'. [ 333.915145][T11421] loop9: detected capacity change from 0 to 128 [ 334.321091][T11433] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 334.342671][T11436] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 334.349568][T11436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 334.432773][T11436] vhci_hcd vhci_hcd.0: Device attached [ 334.476553][ T30] audit: type=1326 audit(1764098530.204:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11431 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 334.556560][ T30] audit: type=1326 audit(1764098530.244:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11431 comm="syz.8.2055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 334.570323][T11437] vhci_hcd: connection closed [ 334.621020][T10783] vhci_hcd vhci_hcd.8: stop threads [ 334.652685][T10783] vhci_hcd vhci_hcd.8: release socket [ 334.674247][T10783] vhci_hcd vhci_hcd.8: disconnect device [ 334.686579][ T6009] usb 50-1: SetAddress Request (2) to port 0 [ 334.701323][ T6009] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 334.737453][ T6009] usb 50-1: enqueue for inactive port 0 [ 334.848661][T11456] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2062'. [ 334.866643][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 334.878788][T11456] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.2062'. [ 334.952637][T11460] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 334.952637][T11460] program syz.9.2065 not setting count and/or reply_len properly [ 335.160310][ T6009] usb usb50-port1: attempt power cycle [ 335.257266][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 335.522357][ T30] audit: type=1326 audit(1764098531.254:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 335.573116][ T30] audit: type=1326 audit(1764098531.254:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 335.632587][ T30] audit: type=1326 audit(1764098531.254:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 335.691681][T11488] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2078'. [ 335.711730][ T30] audit: type=1326 audit(1764098531.294:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.3.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 335.747634][T11492] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2078'. [ 335.758530][ T6009] usb usb50-port1: unable to enumerate USB device [ 335.801167][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2081'. [ 335.804862][T11494] loop8: detected capacity change from 0 to 128 [ 335.811141][T11495] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2081'. [ 335.860062][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2081'. [ 335.931519][ T30] audit: type=1326 audit(1764098531.664:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 336.003002][ T30] audit: type=1326 audit(1764098531.664:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 336.074067][ T30] audit: type=1326 audit(1764098531.664:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 336.161670][ T30] audit: type=1326 audit(1764098531.664:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a358f749 code=0x7ffc0000 [ 336.200429][T11504] loop6: detected capacity change from 0 to 1024 [ 336.269389][T11504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.356644][T11504] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.528082][T11511] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 336.575005][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 336.585137][T11521] loop7: detected capacity change from 0 to 164 [ 336.625783][T11521] iso9660: Bad value for 'uid' [ 336.656550][T11521] iso9660: Bad value for 'uid' [ 336.855029][T11530] loop9: detected capacity change from 0 to 128 [ 336.905313][T11528] loop8: detected capacity change from 0 to 2048 [ 336.980400][T11528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.998214][T11528] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.764200][ T13] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 337.801928][ T13] EXT4-fs (loop8): Remounting filesystem read-only [ 337.895209][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.405899][T11576] loop6: detected capacity change from 0 to 512 [ 338.528289][T11576] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2114: bg 0: block 248: padding at end of block bitmap is not set [ 338.617925][T11576] EXT4-fs error (device loop6): ext4_acquire_dquot:6948: comm syz.6.2114: Failed to acquire dquot type 1 [ 338.666025][T11576] EXT4-fs (loop6): 1 truncate cleaned up [ 338.730071][T11576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.790340][T11576] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.880744][T11576] EXT4-fs error (device loop6): ext4_acquire_dquot:6948: comm syz.6.2114: Failed to acquire dquot type 1 [ 338.932480][T11576] bridge_slave_0: left allmulticast mode [ 338.968484][T11576] bridge_slave_0: left promiscuous mode [ 338.988026][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.014320][T11595] __nla_validate_parse: 6 callbacks suppressed [ 339.014344][T11595] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.2122'. [ 339.039393][T11576] bridge_slave_1: left allmulticast mode [ 339.055323][T11576] bridge_slave_1: left promiscuous mode [ 339.065249][T11595] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.2122'. [ 339.087219][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.128035][T11576] bond0: (slave bond_slave_0): Releasing backup interface [ 339.177948][T11576] bond0: (slave bond_slave_1): Releasing backup interface [ 339.185223][T11597] mmap: syz.3.2123 (11597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 339.240106][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'. [ 339.318004][T11576] team0: Port device team_slave_0 removed [ 339.362025][T11576] team0: Port device team_slave_1 removed [ 339.397593][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.404267][T11603] loop8: detected capacity change from 0 to 128 [ 339.405038][T11576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.458498][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.466189][T11576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.512042][T11576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.655862][ T8334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.830285][T11615] loop6: detected capacity change from 0 to 1024 [ 339.859779][T11615] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 339.887610][T11615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 339.921513][T11615] JBD2: no valid journal superblock found [ 339.943265][T11615] EXT4-fs (loop6): Could not load journal inode [ 339.987253][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 340.198931][T11625] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.2134'. [ 340.226797][T11625] netlink: 16162 bytes leftover after parsing attributes in process `syz.7.2134'. [ 340.236620][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 340.278988][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2136'. [ 340.519995][T11639] loop6: detected capacity change from 0 to 764 [ 340.559006][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2138'. [ 340.707149][T11642] loop8: detected capacity change from 0 to 128 [ 340.950215][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 340.950237][ T30] audit: type=1326 audit(1764098536.674:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 341.068173][ T30] audit: type=1326 audit(1764098536.714:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 341.137823][ T30] audit: type=1326 audit(1764098536.714:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11652 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53018f749 code=0x7ffc0000 [ 341.243530][T11661] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2145'. [ 341.558391][T11667] netlink: 16162 bytes leftover after parsing attributes in process `syz.8.2150'. [ 341.898651][T11675] set_capacity_and_notify: 1 callbacks suppressed [ 341.898689][T11675] loop8: detected capacity change from 0 to 512 [ 341.937307][T11675] EXT4-fs warning (device loop8): read_mmp_block:111: Error -74 while reading MMP block 13 [ 344.526923][ T30] audit: type=1326 audit(1764098540.254:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 344.596481][ T30] audit: type=1326 audit(1764098540.254:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 344.671043][ T30] audit: type=1326 audit(1764098540.264:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 344.757081][ T30] audit: type=1326 audit(1764098540.264:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 344.836489][ T30] audit: type=1326 audit(1764098540.334:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.3.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5611f8f749 code=0x7ffc0000 [ 344.848558][T11702] __nla_validate_parse: 2 callbacks suppressed [ 344.848579][T11702] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2163'. [ 344.936647][T11702] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2163'. [ 347.403746][T11729] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2174'. [ 347.455859][T11729] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2174'. [ 347.765371][T11737] loop8: detected capacity change from 0 to 128 [ 347.891292][T11737] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 347.984290][T11737] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.355075][ T8546] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.549074][T11751] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2181'. [ 349.140522][T11758] loop8: detected capacity change from 0 to 128 [ 349.270883][T11758] bio_check_eod: 101 callbacks suppressed [ 349.270907][T11758] syz.8.2185: attempt to access beyond end of device [ 349.270907][T11758] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 349.380984][T11758] syz.8.2185: attempt to access beyond end of device [ 349.380984][T11758] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 349.435007][T11758] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 349.478529][T11758] syz.8.2185: attempt to access beyond end of device [ 349.478529][T11758] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 349.519234][T11758] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 349.540907][T11764] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2187'. [ 349.581278][T11764] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2187'. [ 349.589269][T11758] syz.8.2185: attempt to access beyond end of device [ 349.589269][T11758] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 349.608221][T11758] syz.8.2185: attempt to access beyond end of device [ 349.608221][T11758] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 349.666897][T11758] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 349.696066][T11758] syz.8.2185: attempt to access beyond end of device [ 349.696066][T11758] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 349.788900][T11758] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 349.850570][ T30] audit: type=1326 audit(1764098545.584:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 349.895081][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2188'. [ 349.930937][ T30] audit: type=1326 audit(1764098545.604:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.024902][ T30] audit: type=1326 audit(1764098545.604:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.116529][ T30] audit: type=1326 audit(1764098545.604:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.204703][ T30] audit: type=1326 audit(1764098545.614:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.296458][ T30] audit: type=1326 audit(1764098545.614:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.396470][ T30] audit: type=1326 audit(1764098545.614:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.487121][ T30] audit: type=1326 audit(1764098545.614:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.578291][ T30] audit: type=1326 audit(1764098545.614:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 350.723657][ T30] audit: type=1326 audit(1764098545.614:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.9.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8056b8f749 code=0x7ffc0000 [ 351.610182][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2196'. [ 351.656533][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2196'. [ 352.810452][T11781] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 353.139667][T11801] loop6: detected capacity change from 0 to 512 [ 353.179905][T11801] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2198: bg 0: block 5: invalid block bitmap [ 353.238253][T11801] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 353.289340][T11801] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2198: invalid indirect mapped block 3 (level 2) [ 353.336576][T11801] EXT4-fs (loop6): 2 truncates cleaned up [ 353.355003][T11801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.370256][T11807] loop9: detected capacity change from 0 to 128 [ 353.400819][T11801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.619473][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2209'. [ 353.643330][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2209'. [ 353.650733][T11815] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2208'. [ 353.682383][T11815] netlink: 16162 bytes leftover after parsing attributes in process `syz.9.2208'. [ 354.380466][T11835] loop6: detected capacity change from 0 to 128 [ 354.457785][T11837] loop7: detected capacity change from 0 to 512 [ 354.504216][T11837] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2220: bg 0: block 5: invalid block bitmap [ 354.527288][T11837] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 354.605498][T11837] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2220: invalid indirect mapped block 3 (level 2) [ 354.677250][T11837] EXT4-fs (loop7): 2 truncates cleaned up [ 354.699836][T11837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.746760][T11837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.761040][T11842] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.2222'. [ 354.800862][T11842] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.2222'. [ 354.962601][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2224'. [ 355.047201][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2224'. [ 355.346505][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 355.481742][T11861] loop9: detected capacity change from 0 to 128 [ 355.713136][T11868] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.2234'. [ 355.752208][T11868] netlink: 16162 bytes leftover after parsing attributes in process `syz.6.2234'. [ 355.904502][T11872] loop9: detected capacity change from 0 to 512 [ 355.976937][T11872] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2236: bg 0: block 5: invalid block bitmap [ 356.030803][T11872] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 356.041744][T11878] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2239'. [ 356.068932][T11872] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2236: invalid indirect mapped block 3 (level 2) [ 356.102321][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2239'. [ 356.121558][T11872] EXT4-fs (loop9): 2 truncates cleaned up [ 356.162687][T11872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.221243][T11872] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.329886][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2242'. [ 356.523617][T11892] loop7: detected capacity change from 0 to 128 [ 356.870866][T11898] validate_nla: 2 callbacks suppressed [ 356.870889][T11898] netlink: 'syz.6.2249': attribute type 4 has an invalid length. [ 356.909153][T11898] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2249'. [ 356.938442][T11901] netlink: 'syz.6.2249': attribute type 4 has an invalid length. [ 356.969489][T11901] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2249'. [ 357.037992][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2251'. [ 357.241349][T11911] loop6: detected capacity change from 0 to 512 [ 357.281171][T11911] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2254: bg 0: block 5: invalid block bitmap [ 357.318429][T11911] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 357.391825][T11911] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2254: invalid indirect mapped block 3 (level 2) [ 357.492267][T11911] EXT4-fs (loop6): 2 truncates cleaned up [ 357.502515][T11911] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.526215][T11911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.734616][T11922] loop9: detected capacity change from 0 to 128 [ 358.256600][T11937] netlink: 'syz.9.2266': attribute type 4 has an invalid length. [ 358.282011][T11937] netlink: 'syz.9.2266': attribute type 4 has an invalid length. [ 358.598618][T11948] loop9: detected capacity change from 0 to 512 [ 358.671391][T11948] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2271: bg 0: block 5: invalid block bitmap [ 358.699140][T11951] loop7: detected capacity change from 0 to 128 [ 358.776628][T11948] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 358.803736][T11948] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2271: invalid indirect mapped block 3 (level 2) [ 358.878451][T11948] EXT4-fs (loop9): 2 truncates cleaned up [ 358.895546][T11948] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.951934][T11948] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.340350][T11969] netlink: 'syz.8.2281': attribute type 4 has an invalid length. [ 359.371736][T11969] netlink: 'syz.8.2281': attribute type 4 has an invalid length. [ 359.781098][T11983] loop7: detected capacity change from 0 to 128 [ 359.928822][T11987] loop8: detected capacity change from 0 to 512 [ 359.955590][T11987] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2289: bg 0: block 5: invalid block bitmap [ 360.129135][T11987] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 360.163446][T11987] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2289: invalid indirect mapped block 3 (level 2) [ 360.231986][T11987] EXT4-fs (loop8): 2 truncates cleaned up [ 360.263411][T11987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.329265][T11987] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.462024][T11998] netlink: 'syz.6.2294': attribute type 1 has an invalid length. [ 360.513798][T11999] netlink: 'syz.6.2294': attribute type 1 has an invalid length. [ 360.518775][T11998] netlink: 'syz.6.2294': attribute type 4 has an invalid length. [ 360.557978][T11998] __nla_validate_parse: 11 callbacks suppressed [ 360.558002][T11998] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2294'. [ 360.583378][T11999] netlink: 'syz.6.2294': attribute type 4 has an invalid length. [ 360.618210][T11999] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2294'. [ 360.808578][T12005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2297'. [ 360.825622][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2297'. [ 361.094009][T12016] loop8: detected capacity change from 0 to 128 [ 361.493496][T12029] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2309'. [ 361.545987][T12029] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2309'. [ 361.567156][T12026] loop6: detected capacity change from 0 to 512 [ 361.657775][T12026] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2308: bg 0: block 5: invalid block bitmap [ 361.754132][T12026] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 361.764812][T12026] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2308: invalid indirect mapped block 3 (level 2) [ 361.772398][T12040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2314'. [ 361.781822][T12026] EXT4-fs (loop6): 2 truncates cleaned up [ 361.795035][T12026] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.817037][T12026] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.836907][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2314'. [ 362.150926][T12049] loop9: detected capacity change from 0 to 128 [ 362.683264][T12061] validate_nla: 4 callbacks suppressed [ 362.683288][T12061] netlink: 'syz.7.2323': attribute type 1 has an invalid length. [ 362.718016][T12061] netlink: 'syz.7.2323': attribute type 4 has an invalid length. [ 362.751907][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2326'. [ 362.761539][T12068] netlink: 'syz.7.2323': attribute type 1 has an invalid length. [ 362.770218][T12064] loop9: detected capacity change from 0 to 512 [ 362.778094][T12061] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2323'. [ 362.811523][T12068] netlink: 'syz.7.2323': attribute type 4 has an invalid length. [ 362.853092][T12064] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.878280][T12069] netlink: 'syz.6.2327': attribute type 10 has an invalid length. [ 362.918031][T12069] batadv0: entered promiscuous mode [ 362.923654][T12069] batadv0: entered allmulticast mode [ 362.934531][T12064] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.985553][T12069] bridge0: port 1(batadv0) entered blocking state [ 363.042458][T12069] bridge0: port 1(batadv0) entered disabled state [ 363.057926][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 363.057947][ T30] audit: type=1800 audit(1764098558.794:1587): pid=12064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2325" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 363.109270][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 363.119108][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 363.122925][T12075] loop8: detected capacity change from 0 to 512 [ 363.129255][T12069] bridge0: port 1(batadv0) entered blocking state [ 363.141825][T12069] bridge0: port 1(batadv0) entered forwarding state [ 363.227258][T12075] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2328: bg 0: block 5: invalid block bitmap [ 363.312183][T10960] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.381618][T12075] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 363.426993][T12075] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2328: invalid indirect mapped block 3 (level 2) [ 363.490159][T12084] bridge0: entered promiscuous mode [ 363.510610][T12084] macsec1: entered promiscuous mode [ 363.530149][T12084] bridge0: port 3(macsec1) entered blocking state [ 363.553262][T12088] loop9: detected capacity change from 0 to 128 [ 363.560794][T12084] bridge0: port 3(macsec1) entered disabled state [ 363.568852][T12084] macsec1: entered allmulticast mode [ 363.584895][T12075] EXT4-fs (loop8): 2 truncates cleaned up [ 363.603611][T12084] bridge0: entered allmulticast mode [ 363.612478][T12075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.640767][T12075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.669068][T12084] macsec1: left allmulticast mode [ 363.674437][T12084] bridge0: left allmulticast mode [ 363.691350][T12084] bridge0: left promiscuous mode [ 364.355921][T12106] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 364.406891][T12106] netlink: 'syz.7.2342': attribute type 4 has an invalid length. [ 364.427606][T12104] syzkaller0: entered allmulticast mode [ 364.444985][T12106] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 364.479057][T12106] netlink: 'syz.7.2342': attribute type 4 has an invalid length. [ 364.544778][T12104] syzkaller0 (unregistering): left allmulticast mode [ 365.157923][ T30] audit: type=1326 audit(1764098560.894:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.252350][ T30] audit: type=1326 audit(1764098560.934:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.335414][ T30] audit: type=1326 audit(1764098560.934:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.436055][T12135] netlink: 'syz.7.2359': attribute type 1 has an invalid length. [ 365.444650][ T30] audit: type=1326 audit(1764098560.934:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.508871][T12140] loop8: detected capacity change from 0 to 512 [ 365.535935][ T30] audit: type=1326 audit(1764098560.934:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.639325][T12140] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2360: bg 0: block 5: invalid block bitmap [ 365.687517][ T30] audit: type=1326 audit(1764098560.934:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.710713][T12147] loop7: detected capacity change from 0 to 128 [ 365.741290][T12140] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 365.765783][T12140] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2360: invalid indirect mapped block 3 (level 2) [ 365.815806][T12140] EXT4-fs (loop8): 2 truncates cleaned up [ 365.829571][T12146] __nla_validate_parse: 11 callbacks suppressed [ 365.829595][T12146] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2363'. [ 365.832209][ T30] audit: type=1326 audit(1764098560.934:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12126 comm="syz.7.2354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 365.893590][T12140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.032525][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.053733][ T30] audit: type=1326 audit(1764098561.764:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.7.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 366.136877][ T30] audit: type=1326 audit(1764098561.764:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.7.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 366.545932][T12165] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2372'. [ 366.597817][T12165] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2372'. [ 366.779389][T12171] loop9: detected capacity change from 0 to 128 [ 366.965946][T12176] loop7: detected capacity change from 0 to 512 [ 367.044730][T12176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2378: bg 0: block 5: invalid block bitmap [ 367.124043][T12176] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 367.204518][T12176] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2378: invalid indirect mapped block 3 (level 2) [ 367.257931][T12176] EXT4-fs (loop7): 2 truncates cleaned up [ 367.267644][T12176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.454535][ T8519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.469220][T12195] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2386'. [ 367.493865][T12195] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2386'. [ 367.855230][T12205] loop8: detected capacity change from 0 to 128 [ 368.179259][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 368.179280][ T30] audit: type=1326 audit(368.147:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.261947][ T30] audit: type=1326 audit(368.147:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.290930][ T30] audit: type=1326 audit(368.147:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.369689][T12223] validate_nla: 11 callbacks suppressed [ 368.369720][T12223] netlink: 'syz.6.2400': attribute type 1 has an invalid length. [ 368.387377][ T30] audit: type=1326 audit(368.147:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.433179][T12223] netlink: 'syz.6.2400': attribute type 4 has an invalid length. [ 368.440616][T12226] netlink: 'syz.6.2400': attribute type 1 has an invalid length. [ 368.475672][T12226] netlink: 'syz.6.2400': attribute type 4 has an invalid length. [ 368.483666][ T30] audit: type=1326 audit(368.287:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.521281][T12223] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2400'. [ 368.542608][T12228] loop8: detected capacity change from 0 to 512 [ 368.553574][T12226] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2400'. [ 368.574438][ T30] audit: type=1326 audit(368.287:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.597915][T12228] EXT4-fs: Ignoring removed bh option [ 368.617148][T12228] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 368.662443][ T30] audit: type=1326 audit(368.317:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.688620][T12228] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 368.715700][ T30] audit: type=1326 audit(368.317:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.758962][T12228] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 368.793468][ T30] audit: type=1326 audit(368.317:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.826488][ T30] audit: type=1326 audit(368.317:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12216 comm="syz.7.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f8af1b8f749 code=0x7ffc0000 [ 368.828572][T12228] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 368.900115][T12228] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.974577][T12241] loop7: detected capacity change from 0 to 128 [ 369.237385][T12248] loop7: detected capacity change from 0 to 256 [ 369.261562][T12248] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.302194][T12248] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 369.319396][T12248] FAT-fs (loop7): Filesystem has been set read-only [ 369.441437][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.762401][T12263] netlink: 'syz.9.2417': attribute type 1 has an invalid length. [ 369.776326][T12263] netlink: 'syz.9.2417': attribute type 4 has an invalid length. [ 369.784171][T12263] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2417'. [ 369.867640][T12263] netlink: 'syz.9.2417': attribute type 1 has an invalid length. [ 369.911654][T12263] netlink: 'syz.9.2417': attribute type 4 has an invalid length. [ 369.936756][T12263] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2417'. [ 369.954327][T12269] loop7: detected capacity change from 0 to 128 [ 370.523093][T12287] loop8: detected capacity change from 0 to 8192 [ 370.651875][T12297] tmpfs: Bad value for 'mpol' [ 370.863794][T12306] netlink: 'syz.6.2436': attribute type 1 has an invalid length. [ 370.893307][T12306] netlink: 'syz.6.2436': attribute type 4 has an invalid length. [ 370.912722][T12306] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2436'. [ 370.952492][T12309] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2436'. [ 371.110939][T12313] loop7: detected capacity change from 0 to 7 [ 371.143645][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.153022][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.171123][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.180461][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.203203][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.212447][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.237673][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.247034][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.262728][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.272065][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.282110][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.291319][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.304250][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.313590][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.324798][ T8519] ldm_validate_partition_table(): Disk read failed. [ 371.349493][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.358841][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.367479][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.376778][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.388294][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.397734][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 371.408834][ T8519] Dev loop7: unable to read RDB block 0 [ 371.415318][ T8519] loop7: unable to read partition table [ 371.423016][ T8519] loop7: partition table beyond EOD, truncated [ 371.435279][T12313] ldm_validate_partition_table(): Disk read failed. [ 371.470789][T12313] Dev loop7: unable to read RDB block 0 [ 371.485635][T12313] loop7: unable to read partition table [ 371.506856][T12313] loop7: partition table beyond EOD, truncated [ 371.526623][T12313] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 371.792675][T12333] tmpfs: Bad value for 'mpol' [ 371.808027][T12334] loop8: detected capacity change from 0 to 128 [ 371.848490][T12338] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2449'. [ 371.881355][T12338] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2449'. [ 372.525337][T12365] tmpfs: Bad value for 'mpol' [ 372.732125][T12372] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2465'. [ 372.756156][T12372] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2465'. [ 373.312933][T12394] tmpfs: Bad value for 'mpol' [ 373.388480][T12397] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 373.408365][T12398] loop9: detected capacity change from 0 to 128 [ 373.465819][T12400] loop8: detected capacity change from 0 to 2048 [ 373.474532][T12400] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.520542][T12400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.538185][T12404] validate_nla: 10 callbacks suppressed [ 373.538207][T12404] netlink: 'syz.7.2480': attribute type 1 has an invalid length. [ 373.551944][T12404] netlink: 'syz.7.2480': attribute type 4 has an invalid length. [ 373.561214][T12404] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2480'. [ 373.572458][T12404] netlink: 'syz.7.2480': attribute type 1 has an invalid length. [ 373.591959][T12404] netlink: 'syz.7.2480': attribute type 4 has an invalid length. [ 373.601196][T12404] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2480'. [ 373.654834][ T8546] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.902644][T12419] loop8: detected capacity change from 0 to 512 [ 373.939687][T12422] loop7: detected capacity change from 0 to 128 [ 373.947755][T12419] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.2487: ea_inode file size=0 entry size=6 [ 373.965776][T12419] ------------[ cut here ]------------ [ 373.971936][T12419] EA inode 11 i_nlink=2 [ 373.971958][T12419] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#1: syz.8.2487/12419 [ 373.983925][T12419] Modules linked in: [ 373.988395][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.8.2487 Not tainted syzkaller #0 PREEMPT(full) [ 373.998611][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.009511][T12419] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 374.016168][T12419] Code: 74 08 4c 89 ef e8 14 b0 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 20 af ca 08 44 89 [ 374.036059][T12419] RSP: 0018:ffffc9000335f240 EFLAGS: 00010246 [ 374.042237][T12419] RAX: 0000000000000000 RBX: 1ffff1100b3dadcd RCX: dffffc0000000000 [ 374.050355][T12419] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8f845a00 [ 374.058440][T12419] RBP: ffffc9000335f330 R08: ffff888059ed6e6f R09: 1ffff1100b3dadcd [ 374.066847][T12419] R10: dffffc0000000000 R11: ffffed100b3dadce R12: ffffffff8f845a00 [ 374.074900][T12419] R13: 000000000000000b R14: 1ffff1100b3dad98 R15: ffff888059ed6cc0 [ 374.082974][T12419] FS: 00007fa530f8c6c0(0000) GS:ffff888125f8b000(0000) knlGS:0000000000000000 [ 374.092768][T12419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.100060][T12419] CR2: 00007f8af1b72a60 CR3: 000000003ccd6000 CR4: 00000000003526f0 [ 374.108166][T12419] Call Trace: [ 374.111482][T12419] [ 374.114455][T12419] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 374.120903][T12419] ? __kmalloc_cache_noprof+0x3e2/0x6f0 [ 374.126556][T12419] ? ext4_xattr_inode_dec_ref_all+0x4ca/0xe00 [ 374.132679][T12419] ? __ext4_journal_ensure_credits+0x30/0x450 [ 374.138884][T12419] ext4_xattr_inode_dec_ref_all+0x8c3/0xe00 [ 374.144846][T12419] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 374.151395][T12419] ? __ext4_journal_get_write_access+0x272/0x570 [ 374.157833][T12419] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 374.164579][T12419] ext4_xattr_delete_inode+0xa4c/0xc10 [ 374.170170][T12419] ? ext4_truncate+0xdcc/0x12b0 [ 374.175069][T12419] ? up_write+0x1ac/0x410 [ 374.179511][T12419] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 374.185544][T12419] ext4_evict_inode+0xa58/0xe60 [ 374.190568][T12419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 374.196760][T12419] ? do_raw_spin_unlock+0x122/0x240 [ 374.202024][T12419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 374.208182][T12419] evict+0x5f4/0xae0 [ 374.212346][T12419] ? __pfx_evict+0x10/0x10 [ 374.216858][T12419] ? _raw_spin_unlock+0x28/0x50 [ 374.221770][T12419] ? iput+0xcc6/0x1030 [ 374.225897][T12419] ext4_orphan_cleanup+0xc20/0x1460 [ 374.231815][T12419] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 374.237544][T12419] ? ext4_register_li_request+0x259/0x720 [ 374.243268][T12419] ? errseq_check_and_advance+0x66/0x120 [ 374.249009][T12419] ext4_fill_super+0x5946/0x6200 [ 374.253991][T12419] ? __pfx_ext4_fill_super+0x10/0x10 [ 374.259360][T12419] ? snprintf+0xda/0x120 [ 374.263656][T12419] ? __pfx_snprintf+0x10/0x10 [ 374.268420][T12419] ? set_blocksize+0x21e/0x500 [ 374.273196][T12419] ? sb_set_blocksize+0x155/0x240 [ 374.278288][T12419] ? setup_bdev_super+0x4c1/0x5b0 [ 374.283364][T12419] get_tree_bdev_flags+0x40e/0x4d0 [ 374.288566][T12419] ? __pfx_ext4_fill_super+0x10/0x10 [ 374.293858][T12419] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 374.300267][T12419] vfs_get_tree+0x92/0x2a0 [ 374.304739][T12419] do_new_mount+0x302/0xa10 [ 374.310098][T12419] ? apparmor_capable+0x137/0x1a0 [ 374.315182][T12419] ? __pfx_do_new_mount+0x10/0x10 [ 374.320278][T12419] ? ns_capable+0x8a/0xf0 [ 374.324652][T12419] ? kmem_cache_free+0x197/0x620 [ 374.329673][T12419] __se_sys_mount+0x313/0x410 [ 374.334379][T12419] ? __pfx___se_sys_mount+0x10/0x10 [ 374.339668][T12419] ? __x64_sys_mount+0x20/0xc0 [ 374.344460][T12419] do_syscall_64+0xfa/0xf80 [ 374.349103][T12419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.355159][T12419] ? clear_bhb_loop+0x60/0xb0 [ 374.360139][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.366107][T12419] RIP: 0033:0x7fa530190eea [ 374.370559][T12419] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.390900][T12419] RSP: 002b:00007fa530f8be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.400121][T12419] RAX: ffffffffffffffda RBX: 00007fa530f8bef0 RCX: 00007fa530190eea [ 374.408818][T12419] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa530f8beb0 [ 374.416903][T12419] RBP: 0000200000000180 R08: 00007fa530f8bef0 R09: 0000000000800700 [ 374.424917][T12419] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 374.432983][T12419] R13: 00007fa530f8beb0 R14: 0000000000000473 R15: 0000200000000680 [ 374.441077][T12419] [ 374.444126][T12419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 374.451448][T12419] CPU: 1 UID: 0 PID: 12419 Comm: syz.8.2487 Not tainted syzkaller #0 PREEMPT(full) [ 374.460855][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.470944][T12419] Call Trace: [ 374.474230][T12419] [ 374.477155][T12419] dump_stack_lvl+0x99/0x250 [ 374.481744][T12419] ? __asan_memcpy+0x40/0x70 [ 374.486340][T12419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.491551][T12419] ? __pfx__printk+0x10/0x10 [ 374.496145][T12419] vpanic+0x237/0x6d0 [ 374.500113][T12419] ? __pfx_vpanic+0x10/0x10 [ 374.504620][T12419] ? is_bpf_text_address+0x292/0x2b0 [ 374.509935][T12419] ? is_bpf_text_address+0x26/0x2b0 [ 374.515136][T12419] panic+0xb9/0xc0 [ 374.518858][T12419] ? __pfx_panic+0x10/0x10 [ 374.523449][T12419] __warn+0x317/0x4b0 [ 374.527432][T12419] __report_bug+0x22e/0x4b0 [ 374.532112][T12419] ? __pfx___report_bug+0x10/0x10 [ 374.537267][T12419] ? __ext4_get_inode_loc+0x69a/0x1040 [ 374.543258][T12419] ? ext4_fc_track_inode+0x133/0xb20 [ 374.548568][T12419] ? set_normalized_timespec64+0xf0/0x1a0 [ 374.554500][T12419] ? __ext4_journal_get_write_access+0x84/0x570 [ 374.560761][T12419] report_bug_entry+0x16a/0x220 [ 374.565706][T12419] ? ext4_xattr_inode_update_ref+0x4dc/0x570 [ 374.571799][T12419] ? ext4_xattr_inode_update_ref+0x4e1/0x570 [ 374.577820][T12419] handle_bug+0xca/0x200 [ 374.582379][T12419] exc_invalid_op+0x1a/0x50 [ 374.586900][T12419] asm_exc_invalid_op+0x1a/0x20 [ 374.591752][T12419] RIP: 0010:ext4_xattr_inode_update_ref+0x4dc/0x570 [ 374.598614][T12419] Code: 74 08 4c 89 ef e8 14 b0 9a ff 4d 8b 6d 00 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 75 77 41 8b 17 4c 89 e7 4c 89 ee <67> 48 0f b9 3a 4c 8b 6c 24 28 e9 bd fe ff ff e8 20 af ca 08 44 89 [ 374.618323][T12419] RSP: 0018:ffffc9000335f240 EFLAGS: 00010246 [ 374.624414][T12419] RAX: 0000000000000000 RBX: 1ffff1100b3dadcd RCX: dffffc0000000000 [ 374.632427][T12419] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff8f845a00 [ 374.640414][T12419] RBP: ffffc9000335f330 R08: ffff888059ed6e6f R09: 1ffff1100b3dadcd [ 374.648599][T12419] R10: dffffc0000000000 R11: ffffed100b3dadce R12: ffffffff8f845a00 [ 374.656590][T12419] R13: 000000000000000b R14: 1ffff1100b3dad98 R15: ffff888059ed6cc0 [ 374.664681][T12419] ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10 [ 374.671031][T12419] ? __kmalloc_cache_noprof+0x3e2/0x6f0 [ 374.676591][T12419] ? ext4_xattr_inode_dec_ref_all+0x4ca/0xe00 [ 374.682747][T12419] ? __ext4_journal_ensure_credits+0x30/0x450 [ 374.688829][T12419] ext4_xattr_inode_dec_ref_all+0x8c3/0xe00 [ 374.694744][T12419] ? __pfx_ext4_xattr_inode_dec_ref_all+0x10/0x10 [ 374.701168][T12419] ? __ext4_journal_get_write_access+0x272/0x570 [ 374.707509][T12419] ? __pfx___ext4_journal_get_write_access+0x10/0x10 [ 374.714290][T12419] ext4_xattr_delete_inode+0xa4c/0xc10 [ 374.719855][T12419] ? ext4_truncate+0xdcc/0x12b0 [ 374.724787][T12419] ? up_write+0x1ac/0x410 [ 374.729125][T12419] ? __pfx_ext4_xattr_delete_inode+0x10/0x10 [ 374.735124][T12419] ext4_evict_inode+0xa58/0xe60 [ 374.740012][T12419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 374.745512][T12419] ? do_raw_spin_unlock+0x122/0x240 [ 374.750718][T12419] ? __pfx_ext4_evict_inode+0x10/0x10 [ 374.756102][T12419] evict+0x5f4/0xae0 [ 374.760013][T12419] ? __pfx_evict+0x10/0x10 [ 374.764442][T12419] ? _raw_spin_unlock+0x28/0x50 [ 374.769294][T12419] ? iput+0xcc6/0x1030 [ 374.773467][T12419] ext4_orphan_cleanup+0xc20/0x1460 [ 374.778695][T12419] ? __pfx_ext4_orphan_cleanup+0x10/0x10 [ 374.784434][T12419] ? ext4_register_li_request+0x259/0x720 [ 374.790168][T12419] ? errseq_check_and_advance+0x66/0x120 [ 374.795812][T12419] ext4_fill_super+0x5946/0x6200 [ 374.800790][T12419] ? __pfx_ext4_fill_super+0x10/0x10 [ 374.806090][T12419] ? snprintf+0xda/0x120 [ 374.810448][T12419] ? __pfx_snprintf+0x10/0x10 [ 374.815232][T12419] ? set_blocksize+0x21e/0x500 [ 374.820011][T12419] ? sb_set_blocksize+0x155/0x240 [ 374.825053][T12419] ? setup_bdev_super+0x4c1/0x5b0 [ 374.830091][T12419] get_tree_bdev_flags+0x40e/0x4d0 [ 374.835314][T12419] ? __pfx_ext4_fill_super+0x10/0x10 [ 374.840635][T12419] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 374.846284][T12419] vfs_get_tree+0x92/0x2a0 [ 374.850710][T12419] do_new_mount+0x302/0xa10 [ 374.855223][T12419] ? apparmor_capable+0x137/0x1a0 [ 374.860260][T12419] ? __pfx_do_new_mount+0x10/0x10 [ 374.865295][T12419] ? ns_capable+0x8a/0xf0 [ 374.869640][T12419] ? kmem_cache_free+0x197/0x620 [ 374.874769][T12419] __se_sys_mount+0x313/0x410 [ 374.879805][T12419] ? __pfx___se_sys_mount+0x10/0x10 [ 374.885279][T12419] ? __x64_sys_mount+0x20/0xc0 [ 374.890058][T12419] do_syscall_64+0xfa/0xf80 [ 374.894575][T12419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.900742][T12419] ? clear_bhb_loop+0x60/0xb0 [ 374.905428][T12419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.911501][T12419] RIP: 0033:0x7fa530190eea [ 374.915937][T12419] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.936122][T12419] RSP: 002b:00007fa530f8be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.944632][T12419] RAX: ffffffffffffffda RBX: 00007fa530f8bef0 RCX: 00007fa530190eea [ 374.952868][T12419] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa530f8beb0 [ 374.960850][T12419] RBP: 0000200000000180 R08: 00007fa530f8bef0 R09: 0000000000800700 [ 374.968915][T12419] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 374.976977][T12419] R13: 00007fa530f8beb0 R14: 0000000000000473 R15: 0000200000000680 [ 374.984968][T12419] [ 374.988361][T12419] Kernel Offset: disabled [ 374.992687][T12419] Rebooting in 86400 seconds..