last executing test programs: 13.279344316s ago: executing program 3 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x2c) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 11.745474116s ago: executing program 3 (id=2220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 10.827302429s ago: executing program 3 (id=2215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x2c) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 8.814574896s ago: executing program 3 (id=2222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 8.705186063s ago: executing program 2 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 7.005960831s ago: executing program 2 (id=2230): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_OIF={0x8}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 7.004599081s ago: executing program 0 (id=2240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.443590484s ago: executing program 0 (id=2231): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) tgkill(0x0, r0, 0x27) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) ioctl$RTC_IRQP_READ(r3, 0x40187013, &(0x7f0000000680)) pipe2$9p(0x0, 0x84880) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x210, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 5.871329768s ago: executing program 1 (id=2233): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 5.869899418s ago: executing program 2 (id=2234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x2c) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 4.573807673s ago: executing program 1 (id=2235): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) 4.573366093s ago: executing program 3 (id=2236): syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2000048, &(0x7f0000000000)={[{@nouuid}, {@noalign}, {@gqnoenforce}]}, 0x1, 0xb950, &(0x7f000000d2c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 4.571667493s ago: executing program 0 (id=2246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 4.46237255s ago: executing program 2 (id=2237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) 4.46137412s ago: executing program 4 (id=2238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000e00)="bfaff4f4485bc7", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000f00)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc03547888735d83669614e4eb5b9be7e4e76b2bb0c2e504c0f86b616d14acae75b2855f9964778238b006b976edd5e4bbda0c7cb669c25fabc598f5bd5a6ec98a63d59dac5436c04687dad36064d69599f981550ae4beb469332d52226990d21a6f7178ba83cff18b65d698afdf08e245a1868ff7a9117d11ed243932580e8d1f8e4ef583656940b7b2178789b452f611555a8d908cfc703bb8de9e802c65149895c4fe2bc9ecc9bc85eb8815f5f5ca0c2a54a284658de7de7c9ef6b65b2961317534eeeb8b67ab6a5718b94deeb9ef60c21478b343c529aff4079cfbd4e50b006165c839937f0cb2c35a7c7800a523970493819d0a300b581cf0c373dda2e7acd8e91a897e1729e97a5a14480ecf4aeee7792e8b1f21b43cb5552d4b005e933919323e55658bc9de3ec99b69bae43e46a6e2f7064b75e36d4f83b86e1097c83fa6d1296a4c5b62b2d68ad2d8405f686362e5833103905130ef9a8d8df2a3b74ac7b83c2c6506f03191ab4b45688b2389e51258133b3687dafba95f4b835e1730bb03ffb45719ca37786b7e836f4c004bbdc8564e26f994a34e5db06837df0be0322070c47ba3514e0d01ae3422e5e7fb7ce909621d1d223e9164a0cfc270eee5b6581b2c5609a5fef06687717d94242124cf3ef7345020a026173de848dc5aa928d35c3ab936bc840045ada45f7e6fd66b0e3f5aff84b4855c1e86a393ac2a1a8f5660b9cd295e0db9bf7746ef0864334fe9dcb50af3a49eb99bd1320b4169a8d5f54e7e35dd8e705a6364fc62e525d951c83b721e2d9ca60b1365701956712f07f56dce6d4c982c63a420d8b820fd931776d019ecf1ea5564e542093f243b6bb7db6df69e8706e745c485e919da989ea5e3690f1169d7e8ad03185ff21700d61f44abcc8abd6f47d1b5104d217809f13d37ba6986a6c58fd07e18d8e228c664114b64aa84f7302c7e21be253edd78f561872b6573301c947b5f3407c4f4f0576ce5939d220ea898052a048fc8b4c6906c465fc43dd32b83132998ef8ffab3b2601a42a4508507d2b7ada0e23b4efdbff3a673d937397265529ed5ca097406f59b5939f937b9414a60d4347c996db8547f21dac637b4f7da9ca065c2704039d9783ec5582ca65dfbb762d9cffbeab23bcd5eb882335f7d8287e75f49d16de5873f19f1def11ae05ff0879b66154ced85c2999277fe6894b51d3727fe7bafcdd67c31f05e3116db64af893d40c88a1312e4e6668d2842b3bc3c730f9637bd13b1c0e448de9adb3806b2487cc344306da7b9064af7327e1aaedb8a1320d4e9b7b0c2669206b4e9599c1aa35669385a9c3959a48c683ad6281fc70bafa0d8e61830bdadb3907c7371be3fb6a49c82e88ee569c4f8dec3b9d99431647597ddefe581946bfaa6de081aa3ee91bcf82b8046717ac66879adf53856207815d8c1472f2fd0747aff8c98777f76f0c2f8bff16f83ee94cb471669f7e2af11a406fd88537eac8a5e30dfddb3e8311421e366a4715ea8b72609a85d568412e55b22ac5693eb1f199971c8ffd38dd8258bbeb8313440956e74f163b5a04c7e872b3f124f577cdc23435fa15c664e64848e0706dfd31dc048e70b41d5b5850080cb38923232e9182364ac5ab6c31e1fa16f627b5d96657a0c66570c2771432a17b89619b55f65ad26d4b833ca9a8e52fc52db51d27ccf3792708ef8af3ece815cbc959d63b65414c79b1aff41bd7de44ce4c97b6184ce2426bcd50a445c1ec15816a6b393ceae2a1581838c2301bb5951a1970fe7d122c95ec5715d9397eb22076a9f20f1f457ccef60ed60de11b677de9d44b63a4c90a70be9ee2fa92ce2debaf897fdb058dc697221fd55bf01fd1cb3916cbbb418cfb50c4e9c140b60d711c9f3a1ee2a56e178fb5b868eb0201e21b3d786619a06979192f2c0ab3b65261cadff9532cf36cfa9cf67bcbab4f00110a2f3c4acca93c69eb6f97b149936f2feda56fe5730b95b4c85a113b19fd16cf7da40c723447df047d0b5a7fbd8494af57eeb30d060e4c58f6beb5771ec7771cab58dddd3073b21ff3faec310d87fa7b57afade7b1fb8e8f137f0b1a5c403ee57ce9d751fa0769b3a7b44c36db30df9e0f3d32c769f1355b26cf547a0424b1e573e1b5ad7113b77a4750cb3f1a6d1ed457c828680b7a8a3896b557a6aa73fa29e7870a2f9bd2b4dfc4957abb388fdd8b2178f663ade6afa3e6a9c665191576ca973578b808c95c2916250f5a73f533361824b6f5ca145bd2bafa32c942eaf5f68cec22f22249bd1a7d164f97bb7065086379c98dd90b9d71c0c827f5922aadc26efa6bf969243156475167e16a2979f22b4b9e14cf0394050fce7d958c881681720cdbda2d89f5202729f49610813f442530ced1dc72f8d19d1427e97df561170813da37204a17a34046d4f1d1238f5f8f5f4901d2a741755329f402f8726e43", 0x730, 0x4c840, 0x0, 0x0) 3.317895006s ago: executing program 2 (id=2239): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xffffffff) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x107842, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040)=0x2, 0x4) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 3.271874019s ago: executing program 1 (id=2241): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) 3.270929439s ago: executing program 4 (id=2242): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x23, 0x7f3, &(0x7f0000001800)="$eJzs3U9oHOfZAPBnFMmWFfAX8n3kM8ZxxnZKbeoqu1KiVOSQbFYjeRJpV+yuik0pSYhtMJaTEBPS+NDEl6QtLaWnHtNcQy6FHgo9lPbQFgqF5tBLD4VATiWFFkpLCajM7K71x1pJTmQrTX8/Yb2z7z7zzjOzo3l21ruzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUp+pVKrJwYhYOpsOVp9pNRe2uL8/3s/XNVssNyIp/sXoaBzqdh36v9W77yt+HY8j3VtHYrRoRuPa3ffd89j/Dg/1598ioU/q2A7jkog3iqQuPzcUcTsSuYO+87NbnuWfK8XvuayRt5v5Qm0uS/N2M52emqo8dGa2nc7m81n7XLuTLaT1VlbrNFvpyfqptDo9PZlm4+eaS425mdp81u989MsTlcpU+tT4YlZrtZuNh54ab9fP5PPzeWOujJmovBpFzKPFjvh03kk7WW0hTS9eWr4wuV2qRVB1Xc/+dY/XkQfv+fCVD/526UKxQw4aJOntmBPV6sREdeqR6UcerVSGJyoT6zsqG8SNiBiKKCJuy07LZ92B1YPE7h284VMa6tb/iPnIoxFLcTbSSGOo/L36MxKjMROtaMZCcfsPIxvuv6n+f+Ghv/xuq+WW9futoqiP3qjyh1bvPhxl/T/avXV0QP0vDsob89jZz4FbnePKbyPe62aztv9qvBbX4nI8F8uxHBfi5U+Yzx37Gdph3Gj/kdg6bi6yaEQe7WhGHgtRK3vSXk8a0zEVU1GJZ+JMzEY70piNPOYji3aci3Z0Iiv3qHq0IotadKIZrUjjZNTjVKRRjemYjslII4vxOBfNWIpGzMVM1MpRLsalcrtPbsjrvm8+m7zx+w/fLqZvBFW3WJGkeDJXBP11Xff6/aRXzB+IHdX/A70tuD4iiXR4j2sRu6r/p7LT+F04asPuWCnr//BepwEAAADcRkn56nsSESNxfzk1m89nX9vrtAAAAIBdVL6v+UjRjBRT90dSnP9XNol8/47nBgAAAOyOpPyMXRIRY/FAd6r/canNXgQAAAAA/gOV//9/tGjGIl4vO5z/AwAAwOfMtwZdY/+Dfb1r7LcX9yd39aIXzz6YXKkVU7Urvb5e89UbI3ZmDycHe4OUzdTwtbuTiBiuZ0eS/tUvP97fbT8qRzi8egHCQdf6T1qtkeT64ARi6wTKW/HdONaNOXa+257v39NdythsPp+N15vzj1WT3osjnVdeuPSNiGLp324sHEzi4qXlC+PPv7h8vszlejHK9Su9y8Mnt5DLSm8LxP2br/FI+UGM3nLHusutrF3/oe7sQ1svM1m7zDfjeDfm+Fi3HVu//qPFMqvjj1WjVjs41MnOdl5ZWbP2vSyqn3LN34wT3ZgTJ090m02ymFiXxQs3ZzGxNoudbYstsyj0s3j72Otn//6rZpJNbpfF5KfMAmCvXCyv+rNahQ6UVehfK11F/d9Qd/tXNd/0KPfFn/SOoRuOchdXn2X0519T64Zjd6r7m3GyDPnFye7zieHD6+rKE2VdqWxyRH/p0ku/7h3RH373hz/6+tHf/Hi1um04Rj/RfVYwOIt341Q3stfEvb+8qboVQ1TLLfu9DVX1nWKOdwZW1fb8RDISESv/c+Pu8nGKiInJqcrDlcojEzFSPlXoNYMz3b/zvQSAz5ttv2NnB9/C8/DmZ9XRr3j33nhLwXg8Hy/GcpyP0+WnDSLigc1HHVvzNoTT25y1jq35hpfT25xbrsZObIzdfyKJAbGTa7bY//+gbP5x+x4TALjdjm9Th3dS/0/3zrtj8/PuDbX8VPeLc/tnxzG4lm/mK7d7gwDAf4Gs9VEy1nkrabXyxWeq09PVWudMlraa9afTVj4zl6V5o5O16mdqjbksXWw1O816/wXxmaydtpcWF5sfd9LZZitdbLbzs+U3v6e9r35vZwu1xqtRby/OZ7V2ltabjU6t3kln8nY9XVx6cj5vn8la5cztxayez+b1WidvNtJ2c6lVz8bTtJ1lawLzmazRyWfzYrKRLrbyhVrrekTMLy1k6UzWrrfyxU6zO2B/WXljttlaqA1Y/T/fwU0NAJ8ZV1+7dvm55eULL6+fWEk29mw+8ccdxFyNWNnr1QQA1lhbpQEAAAAAAAAAAAAAgM+mmz+uV/Ru+5G+tRMjcQvBGyb2xyeZ6/M78aX3ug/Lbgy4yTj7tpzrrtWeA+se0329nWXvt88tTzz7+OOXB8U8+fqhM3/KIrYfZ/O/lKt337T3xlsHI/b99Pvdnifu1Jq+H921iOFbmn0l2SJmzw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQvwMAAP//wexOyQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000980)=0x13, 0x4) close_range(r0, r1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a000000000000611180000000000018000000000000000000000000000000950000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x6f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mmap(&(0x7f0000268000/0x1000)=nil, 0x1000, 0xb, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.38590485s ago: executing program 2 (id=2243): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 2.38243988s ago: executing program 1 (id=2244): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000069bfb70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r3, 0x1) 1.727943879s ago: executing program 4 (id=2245): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) 1.401047988s ago: executing program 0 (id=2247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000e00)="bfaff4f4485bc7", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="cc", 0x1}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000f00)="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", 0x730, 0x4c840, 0x0, 0x0) 1.37268785s ago: executing program 0 (id=2248): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 1.276114025s ago: executing program 1 (id=2249): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xfff1, 0xfff3}, {0x5, 0xfff1}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) close_range(r4, 0xffffffffffffffff, 0x0) 1.02058188s ago: executing program 3 (id=2250): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa0340110800450000380000000000019078971e0001ac1414aa097215fa120002282520000000000000332f00007f000001ffffffff000088beffff00"/70], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900080000", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 176.416599ms ago: executing program 4 (id=2251): connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 39.629227ms ago: executing program 1 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000001c0)={0x2c, 0x8, r5}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2c) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @dev, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x0, 0x7, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0xfffffffe}}) close(0xffffffffffffffff) unshare(0x60000600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 34.091238ms ago: executing program 4 (id=2253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c00038018000180120002"], 0x4c}}, 0x0) 3.35206ms ago: executing program 4 (id=2254): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0xfffffffffffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x8000, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) 0s ago: executing program 0 (id=2255): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000f00)="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", 0x730, 0x4c840, 0x0, 0x0) kernel console output (not intermixed with test programs): 20] EXT4-fs (loop0): unmounting filesystem. [ 234.905428][ T8824] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 235.428013][ T8832] loop1: detected capacity change from 0 to 4096 [ 235.437225][ T8832] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 235.451431][ T8832] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 235.461052][ T8833] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 235.462256][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.835'. [ 235.463942][ T8833] batman_adv: batadv0: Adding interface: vlan1 [ 235.464999][ T8833] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.468973][ T8833] batman_adv: batadv0: Interface activated: vlan1 [ 235.601608][ T9] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 235.610277][ T8828] loop0: detected capacity change from 0 to 32768 [ 235.668324][ T8828] XFS (loop0): Mounting V5 Filesystem [ 235.712471][ T8828] XFS (loop0): Ending clean mount [ 235.875305][ T8838] loop2: detected capacity change from 0 to 40427 [ 235.883047][ T8838] F2FS-fs (loop2): invalid crc value [ 235.889249][ T8838] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 235.902263][ T8838] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 235.903748][ T8838] F2FS-fs (loop2): Start checkpoint disabled! [ 235.906680][ T8838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 235.996194][ T8844] loop4: detected capacity change from 0 to 32768 [ 236.003284][ T8844] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.846 (8844) [ 236.009945][ T8844] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 236.018975][ T8844] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 236.021470][ T8844] BTRFS info (device loop4): using free space tree [ 236.672138][ T8860] bio_check_eod: 829 callbacks suppressed [ 236.672161][ T8860] syz.2.845: attempt to access beyond end of device [ 236.672161][ T8860] loop2: rw=2049, sector=77824, nr_sectors = 3432 limit=40427 [ 236.700229][ T8860] syz.2.845: attempt to access beyond end of device [ 236.700229][ T8860] loop2: rw=2049, sector=81256, nr_sectors = 664 limit=40427 [ 236.779425][ T8860] syz.2.845: attempt to access beyond end of device [ 236.779425][ T8860] loop2: rw=2049, sector=49152, nr_sectors = 4008 limit=40427 [ 236.829376][ T8860] syz.2.845: attempt to access beyond end of device [ 236.829376][ T8860] loop2: rw=2049, sector=53160, nr_sectors = 88 limit=40427 [ 236.935524][ T8860] syz.2.845: attempt to access beyond end of device [ 236.935524][ T8860] loop2: rw=2049, sector=57344, nr_sectors = 5152 limit=40427 [ 237.203983][ T8865] device syzkaller0 entered promiscuous mode [ 237.383070][ T9] kworker/u4:0: attempt to access beyond end of device [ 237.383070][ T9] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 237.386476][ T9] kworker/u4:0: attempt to access beyond end of device [ 237.386476][ T9] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 237.526548][ T8844] BTRFS info (device loop4): enabling ssd optimizations [ 237.745353][ T8895] loop1: detected capacity change from 0 to 2048 [ 237.776571][ T4328] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 237.781301][ T8895] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 237.782542][ T8895] UDF-fs: Scanning with blocksize 512 failed [ 237.791388][ T8895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.796792][ T8895] overlayfs: upper fs needs to support d_type. [ 237.798138][ T8895] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 237.799224][ T8895] overlayfs: failed to set xattr on upper [ 237.800103][ T8895] overlayfs: ...falling back to index=off,metacopy=off. [ 237.947933][ T4320] XFS (loop0): Unmounting Filesystem [ 237.954115][ T8897] sctp: [Deprecated]: syz.1.854 (pid 8897) Use of int in max_burst socket option deprecated. [ 237.954115][ T8897] Use struct sctp_assoc_value instead [ 238.179639][ T8905] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 238.396641][ T8904] loop4: detected capacity change from 0 to 4096 [ 238.413648][ T8904] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 238.441481][ T8904] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 238.647552][ T8909] loop3: detected capacity change from 0 to 512 [ 238.798169][ T8909] EXT4-fs (loop3): 1 truncate cleaned up [ 238.799225][ T8909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 238.932441][ T8909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.857: bg 0: block 465: padding at end of block bitmap is not set [ 238.936043][ T8909] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 238.938074][ T8909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 238.938074][ T8909] [ 239.461023][ T8893] loop2: detected capacity change from 0 to 65536 [ 239.601424][ T8893] XFS (loop2): Mounting V5 Filesystem [ 239.696689][ T8893] XFS (loop2): Ending clean mount [ 239.727982][ T8893] syz.2.849 (8893): drop_caches: 2 [ 239.782591][ T4449] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 239.784980][ T4449] EXT4-fs (loop3): This should not happen!! Data will be lost [ 239.784980][ T4449] [ 239.786457][ T4449] EXT4-fs (loop3): Total free blocks count 0 [ 239.787350][ T4449] EXT4-fs (loop3): Free/Dirty block details [ 239.788279][ T4449] EXT4-fs (loop3): free_blocks=0 [ 239.788962][ T4449] EXT4-fs (loop3): dirty_blocks=65 [ 239.789740][ T4449] EXT4-fs (loop3): Block reservation details [ 239.832701][ T8929] loop3: detected capacity change from 0 to 512 [ 239.832825][ T4321] XFS (loop2): Unmounting Filesystem [ 239.836892][ T8929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.848669][ T8929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 239.849878][ T8929] System zones: 1-12 [ 239.851334][ T8929] EXT4-fs (loop3): 1 truncate cleaned up [ 239.852346][ T8929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 239.939565][ T8916] loop1: detected capacity change from 0 to 65536 [ 239.964030][ T8916] XFS (loop1): Mounting V5 Filesystem [ 240.025051][ T8916] XFS (loop1): Ending clean mount [ 240.261923][ T8923] loop0: detected capacity change from 0 to 40427 [ 240.269296][ T8923] F2FS-fs (loop0): invalid crc value [ 240.271033][ T8923] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 240.281096][ T8923] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 240.283103][ T8923] F2FS-fs (loop0): Start checkpoint disabled! [ 240.309686][ T8923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 240.348310][ T4322] XFS (loop1): Unmounting Filesystem [ 240.401386][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 240.414544][ T8948] bond0: (slave team0): Releasing backup interface [ 240.854901][ T8951] syz.0.860: attempt to access beyond end of device [ 240.854901][ T8951] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 240.902540][ T8951] syz.0.860: attempt to access beyond end of device [ 240.902540][ T8951] loop0: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 240.986126][ T8951] syz.0.860: attempt to access beyond end of device [ 240.986126][ T8951] loop0: rw=2049, sector=49152, nr_sectors = 4080 limit=40427 [ 241.658774][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.660106][ T8948] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.664369][ T8948] batman_adv: batadv0: Interface deactivated: vlan1 [ 241.668614][ T8948] batman_adv: batadv0: Removing interface: vlan1 [ 241.675016][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 241.675538][ T8948] device wlan1 left promiscuous mode [ 241.676957][ T8948] bridge0: port 1(wlan1) entered disabled state [ 241.753517][ T8949] team0: Mode changed to "loadbalance" [ 241.771007][ T39] bio_check_eod: 3 callbacks suppressed [ 241.771018][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.771018][ T39] loop0: rw=1, sector=64688, nr_sectors = 848 limit=40427 [ 241.787814][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.787814][ T39] loop0: rw=1, sector=69632, nr_sectors = 8 limit=40427 [ 241.790131][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.790131][ T39] loop0: rw=1, sector=69640, nr_sectors = 8 limit=40427 [ 241.792307][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.792307][ T39] loop0: rw=1, sector=69648, nr_sectors = 8 limit=40427 [ 241.794502][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.794502][ T39] loop0: rw=1, sector=69656, nr_sectors = 8 limit=40427 [ 241.799051][ T8956] device syzkaller0 entered promiscuous mode [ 241.823668][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.823668][ T39] loop0: rw=1, sector=69664, nr_sectors = 8 limit=40427 [ 241.826789][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.826789][ T39] loop0: rw=1, sector=69672, nr_sectors = 8 limit=40427 [ 241.828984][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.828984][ T39] loop0: rw=1, sector=69680, nr_sectors = 8 limit=40427 [ 241.831174][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.831174][ T39] loop0: rw=1, sector=69688, nr_sectors = 8 limit=40427 [ 241.833384][ T39] kworker/u4:2: attempt to access beyond end of device [ 241.833384][ T39] loop0: rw=1, sector=69696, nr_sectors = 8 limit=40427 [ 242.089744][ T8955] loop2: detected capacity change from 0 to 65536 [ 242.132785][ T8955] XFS (loop2): Mounting V5 Filesystem [ 242.212635][ T8955] XFS (loop2): Ending clean mount [ 242.279521][ T8955] syz.2.872 (8955): drop_caches: 2 [ 242.387524][ T4321] XFS (loop2): Unmounting Filesystem [ 242.441511][ T8985] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 242.767480][ T8976] loop1: detected capacity change from 0 to 32768 [ 242.792805][ T8976] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.863 (8976) [ 242.804540][ T8976] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 242.812884][ T8976] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 242.814366][ T8976] BTRFS info (device loop1): using free space tree [ 242.881238][ T8993] loop4: detected capacity change from 0 to 128 [ 242.886489][ T8983] loop0: detected capacity change from 0 to 32768 [ 242.913355][ T8983] XFS (loop0): Mounting V5 Filesystem [ 242.964118][ T8983] XFS (loop0): Ending clean mount [ 242.975140][ T8976] BTRFS info (device loop1): enabling ssd optimizations [ 243.250455][ T4322] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 243.695886][ T9026] loop3: detected capacity change from 0 to 128 [ 243.699664][ T9027] loop4: detected capacity change from 0 to 512 [ 244.099187][ T9027] EXT4-fs (loop4): 1 truncate cleaned up [ 244.100153][ T9027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.118413][ T9024] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.874: bg 0: block 465: padding at end of block bitmap is not set [ 244.127426][ T9024] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 244.129502][ T9024] EXT4-fs (loop4): This should not happen!! Data will be lost [ 244.129502][ T9024] [ 244.130956][ T9024] EXT4-fs (loop4): Total free blocks count 0 [ 244.131887][ T9024] EXT4-fs (loop4): Free/Dirty block details [ 244.132861][ T9024] EXT4-fs (loop4): free_blocks=0 [ 244.133576][ T9024] EXT4-fs (loop4): dirty_blocks=66 [ 244.134356][ T9024] EXT4-fs (loop4): Block reservation details [ 244.135815][ T9024] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 244.307531][ T39] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 244.307985][ T9023] loop2: detected capacity change from 0 to 32768 [ 244.331490][ T9034] loop4: detected capacity change from 0 to 512 [ 244.333567][ T9034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.340562][ T9034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 244.341925][ T9034] System zones: 1-12 [ 244.359853][ T9034] EXT4-fs (loop4): 1 truncate cleaned up [ 244.366938][ T9034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.372164][ T9040] device syzkaller0 entered promiscuous mode [ 244.438902][ T9023] XFS (loop2): Mounting V5 Filesystem [ 244.459295][ T9023] XFS (loop2): Ending clean mount [ 244.799339][ T9032] loop1: detected capacity change from 0 to 40427 [ 244.801626][ T9032] F2FS-fs (loop1): invalid crc value [ 244.837233][ T9032] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 244.905310][ T9032] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 244.907178][ T9032] F2FS-fs (loop1): Start checkpoint disabled! [ 244.909813][ T4321] XFS (loop2): Unmounting Filesystem [ 244.925891][ T9054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.927694][ T9032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 244.928185][ T9054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.930379][ T9054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.935724][ T9054] batman_adv: batadv0: Interface deactivated: vlan1 [ 244.936904][ T9054] batman_adv: batadv0: Removing interface: vlan1 [ 244.998290][ T9054] team0: Mode changed to "loadbalance" [ 246.537492][ T4320] XFS (loop0): Unmounting Filesystem [ 246.566847][ T4328] EXT4-fs (loop4): unmounting filesystem. [ 246.814112][ T9065] loop4: detected capacity change from 0 to 32768 [ 246.828392][ T9071] loop1: detected capacity change from 0 to 32768 [ 246.839796][ T9065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.883 (9065) [ 246.847745][ T9071] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.884 (9071) [ 246.848038][ T9065] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 246.851192][ T9065] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 246.852479][ T9065] BTRFS info (device loop4): using free space tree [ 246.858190][ T9071] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.859708][ T9071] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 246.861202][ T9071] BTRFS info (device loop1): turning off barriers [ 246.862171][ T9071] BTRFS info (device loop1): setting nodatasum [ 246.863094][ T9071] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 246.871417][ T9071] BTRFS info (device loop1): use zstd compression, level 3 [ 246.872647][ T9071] BTRFS info (device loop1): using free space tree [ 246.900089][ T9067] loop3: detected capacity change from 0 to 32768 [ 246.904890][ T9067] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.885 (9067) [ 246.927982][ T9065] BTRFS info (device loop4): enabling ssd optimizations [ 247.100218][ T4328] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 247.341269][ T9112] loop0: detected capacity change from 0 to 2048 [ 247.362501][ T9112] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 247.363778][ T9112] UDF-fs: Scanning with blocksize 512 failed [ 247.377924][ T9112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.442649][ T9112] overlayfs: missing 'lowerdir' [ 248.019392][ T9069] loop2: detected capacity change from 0 to 65536 [ 248.093828][ T9069] XFS (loop2): Mounting V5 Filesystem [ 248.131342][ T9069] XFS (loop2): Ending clean mount [ 248.133590][ T9069] XFS (loop2): Quotacheck needed: Please wait. [ 248.156701][ T9069] XFS (loop2): Quotacheck: Done. [ 248.276041][ T4322] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.603855][ T4313] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4313) [ 248.721565][ T4321] XFS (loop2): Unmounting Filesystem [ 248.795828][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.796970][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.081835][ T9141] device syzkaller0 entered promiscuous mode [ 249.213281][ T9134] loop1: detected capacity change from 0 to 32768 [ 249.222196][ T9134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.889 (9134) [ 249.230156][ T9134] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.232006][ T9134] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 249.233411][ T9134] BTRFS info (device loop1): turning off barriers [ 249.234356][ T9134] BTRFS info (device loop1): setting nodatasum [ 249.235718][ T9134] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 249.237119][ T9134] BTRFS info (device loop1): use zstd compression, level 3 [ 249.238221][ T9134] BTRFS info (device loop1): using free space tree [ 249.399716][ T4322] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.512198][ T9165] loop2: detected capacity change from 0 to 2048 [ 249.520584][ T9165] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 249.521737][ T9165] UDF-fs: Scanning with blocksize 512 failed [ 249.525841][ T9165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.531011][ T9165] overlayfs: upper fs needs to support d_type. [ 249.532243][ T9165] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 249.533359][ T9165] overlayfs: failed to set xattr on upper [ 249.534263][ T9165] overlayfs: ...falling back to index=off,metacopy=off. [ 249.631629][ T9167] loop0: detected capacity change from 0 to 512 [ 249.648736][ T9167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 249.671787][ T9167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 249.673338][ T9167] System zones: 1-12 [ 249.690995][ T9167] EXT4-fs (loop0): 1 truncate cleaned up [ 249.691872][ T9167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 250.176632][ T9171] loop4: detected capacity change from 0 to 4096 [ 250.195815][ T9171] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 250.200112][ T9161] loop3: detected capacity change from 0 to 32768 [ 250.258277][ T9161] XFS (loop3): Mounting V5 Filesystem [ 250.307795][ T9161] XFS (loop3): Ending clean mount [ 250.522950][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 250.556030][ T9171] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 250.642520][ T9174] loop1: detected capacity change from 0 to 40427 [ 250.712069][ T9174] F2FS-fs (loop1): invalid crc value [ 250.758137][ T9174] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 251.106708][ T9174] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 251.112256][ T9187] loop0: detected capacity change from 0 to 32768 [ 251.114170][ T9187] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 scanned by syz.0.908 (9187) [ 251.121724][ T9174] F2FS-fs (loop1): Start checkpoint disabled! [ 251.121978][ T9187] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 251.139034][ T9187] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 251.147779][ T9174] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 251.150254][ T9187] BTRFS info (device loop0): using free space tree [ 251.296668][ T9206] bio_check_eod: 1898 callbacks suppressed [ 251.296682][ T9206] syz.1.895: attempt to access beyond end of device [ 251.296682][ T9206] loop1: rw=2049, sector=77824, nr_sectors = 2336 limit=40427 [ 251.307315][ T9206] syz.1.895: attempt to access beyond end of device [ 251.307315][ T9206] loop1: rw=2049, sector=80160, nr_sectors = 1760 limit=40427 [ 251.323351][ T9206] syz.1.895: attempt to access beyond end of device [ 251.323351][ T9206] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 251.348900][ T9206] syz.1.895: attempt to access beyond end of device [ 251.348900][ T9206] loop1: rw=2049, sector=57344, nr_sectors = 7976 limit=40427 [ 251.355818][ T9206] syz.1.895: attempt to access beyond end of device [ 251.355818][ T9206] loop1: rw=2049, sector=65320, nr_sectors = 216 limit=40427 [ 251.358370][ T9206] syz.1.895: attempt to access beyond end of device [ 251.358370][ T9206] loop1: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 251.360587][ T9206] syz.1.895: attempt to access beyond end of device [ 251.360587][ T9206] loop1: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 251.362779][ T9206] syz.1.895: attempt to access beyond end of device [ 251.362779][ T9206] loop1: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 251.364797][ T9206] syz.1.895: attempt to access beyond end of device [ 251.364797][ T9206] loop1: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 251.366881][ T9206] syz.1.895: attempt to access beyond end of device [ 251.366881][ T9206] loop1: rw=2049, sector=69664, nr_sectors = 8 limit=40427 [ 251.393869][ T9191] loop4: detected capacity change from 0 to 32768 [ 251.499639][ T9191] XFS (loop4): Mounting V5 Filesystem [ 251.530249][ T4333] XFS (loop3): Unmounting Filesystem [ 251.562720][ T9225] syz.2.912 (9225): drop_caches: 2 [ 251.587902][ T9191] XFS (loop4): Ending clean mount [ 251.612389][ T9187] BTRFS info (device loop0): enabling ssd optimizations [ 251.723903][ T4320] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 251.811687][ T9238] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 252.354326][ T9243] loop0: detected capacity change from 0 to 512 [ 252.826395][ T9243] EXT4-fs (loop0): 1 truncate cleaned up [ 252.827366][ T9243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 252.939606][ T9243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.902: bg 0: block 465: padding at end of block bitmap is not set [ 252.943320][ T9243] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 252.945224][ T9243] EXT4-fs (loop0): This should not happen!! Data will be lost [ 252.945224][ T9243] [ 253.363727][ T9248] device syzkaller0 entered promiscuous mode [ 253.557531][ T4413] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 253.559314][ T4413] EXT4-fs (loop0): This should not happen!! Data will be lost [ 253.559314][ T4413] [ 253.560663][ T4413] EXT4-fs (loop0): Total free blocks count 0 [ 253.730055][ T4413] EXT4-fs (loop0): Free/Dirty block details [ 253.731397][ T4413] EXT4-fs (loop0): free_blocks=0 [ 253.732632][ T4413] EXT4-fs (loop0): dirty_blocks=65 [ 253.733539][ T4413] EXT4-fs (loop0): Block reservation details [ 254.754025][ T4328] XFS (loop4): Unmounting Filesystem [ 254.938219][ T9249] loop2: detected capacity change from 0 to 65536 [ 254.959466][ T9256] bridge0: port 1(wlan1) entered blocking state [ 254.960486][ T9256] bridge0: port 1(wlan1) entered disabled state [ 254.962815][ T9256] device wlan1 entered promiscuous mode [ 255.337011][ T9249] XFS (loop2): Mounting V5 Filesystem [ 255.418221][ T9249] XFS (loop2): Ending clean mount [ 255.420425][ T9249] XFS (loop2): Quotacheck needed: Please wait. [ 255.443348][ T9249] XFS (loop2): Quotacheck: Done. [ 256.128636][ T4321] XFS (loop2): Unmounting Filesystem [ 256.268549][ T9289] netlink: 14 bytes leftover after parsing attributes in process `syz.3.914'. [ 256.271080][ T9289] netlink: 'syz.3.914': attribute type 10 has an invalid length. [ 256.324335][ T9289] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 256.334675][ T9292] siw: device registration error -23 [ 257.975553][ T9295] loop1: detected capacity change from 0 to 2048 [ 257.984277][ T9297] loop4: detected capacity change from 0 to 2048 [ 257.997113][ T9287] loop0: detected capacity change from 0 to 40427 [ 258.006367][ T9295] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 258.007622][ T9295] UDF-fs: Scanning with blocksize 512 failed [ 258.009591][ T9297] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 258.010836][ T9297] UDF-fs: Scanning with blocksize 512 failed [ 258.016637][ T9295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.018153][ T9297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.034437][ T9295] overlayfs: missing 'lowerdir' [ 258.035841][ T9297] overlayfs: upper fs needs to support d_type. [ 258.037109][ T9297] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 258.038244][ T9297] overlayfs: failed to set xattr on upper [ 258.039130][ T9297] overlayfs: ...falling back to index=off,metacopy=off. [ 258.045777][ T9287] F2FS-fs (loop0): invalid crc value [ 258.058558][ T9287] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 258.101706][ T9287] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 258.111610][ T9287] F2FS-fs (loop0): Start checkpoint disabled! [ 258.126730][ T9287] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 258.320445][ T9303] bio_check_eod: 1936 callbacks suppressed [ 258.320473][ T9303] syz.0.911: attempt to access beyond end of device [ 258.320473][ T9303] loop0: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 258.332373][ T9303] syz.0.911: attempt to access beyond end of device [ 258.332373][ T9303] loop0: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 258.346888][ T9303] syz.0.911: attempt to access beyond end of device [ 258.346888][ T9303] loop0: rw=2049, sector=49152, nr_sectors = 4080 limit=40427 [ 258.351166][ T9303] syz.0.911: attempt to access beyond end of device [ 258.351166][ T9303] loop0: rw=2049, sector=53232, nr_sectors = 16 limit=40427 [ 258.363064][ T9303] syz.0.911: attempt to access beyond end of device [ 258.363064][ T9303] loop0: rw=2049, sector=57344, nr_sectors = 4096 limit=40427 [ 258.376790][ T9303] syz.0.911: attempt to access beyond end of device [ 258.376790][ T9303] loop0: rw=2049, sector=61440, nr_sectors = 4096 limit=40427 [ 258.380908][ T9303] syz.0.911: attempt to access beyond end of device [ 258.380908][ T9303] loop0: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 258.382962][ T9303] syz.0.911: attempt to access beyond end of device [ 258.382962][ T9303] loop0: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 258.385091][ T9303] syz.0.911: attempt to access beyond end of device [ 258.385091][ T9303] loop0: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 258.387282][ T9303] syz.0.911: attempt to access beyond end of device [ 258.387282][ T9303] loop0: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 260.225834][ T9315] bridge0: port 1(wlan1) entered blocking state [ 260.226931][ T9315] bridge0: port 1(wlan1) entered disabled state [ 260.228412][ T9315] device wlan1 entered promiscuous mode [ 260.290588][ T9317] loop1: detected capacity change from 0 to 512 [ 260.298063][ T9317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.337465][ T9317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 260.339092][ T9317] System zones: 1-12 [ 260.367257][ T9317] EXT4-fs (loop1): 1 truncate cleaned up [ 260.368359][ T9317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 260.376311][ T9302] loop3: detected capacity change from 0 to 32768 [ 260.449539][ T9302] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.917 (9302) [ 260.474003][ T9302] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 260.484922][ T9302] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 260.489549][ T9302] BTRFS info (device loop3): using free space tree [ 260.972622][ T9329] device syzkaller0 entered promiscuous mode [ 261.071921][ T9343] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 261.294113][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 261.776328][ T9302] BTRFS error (device loop3): open_ctree failed: -22 [ 261.794380][ T6347] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by udevd (6347) [ 261.887314][ T9356] syz.2.925 (9356): drop_caches: 2 [ 262.092017][ T9352] loop3: detected capacity change from 0 to 40427 [ 262.100737][ T9352] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 262.103048][ T9352] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 262.107766][ T9352] F2FS-fs (loop3): invalid crc value [ 262.121404][ T9352] F2FS-fs (loop3): Found nat_bits in checkpoint [ 262.132563][ T9358] loop2: detected capacity change from 0 to 32768 [ 262.137350][ T9352] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 262.138607][ T9352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.148329][ T9358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.926 (9358) [ 262.214975][ T9358] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.216615][ T9358] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 262.217980][ T9358] BTRFS info (device loop2): turning off barriers [ 262.218993][ T9358] BTRFS info (device loop2): setting nodatasum [ 262.219973][ T9358] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 262.241653][ T9358] BTRFS info (device loop2): use zstd compression, level 3 [ 262.242858][ T9358] BTRFS info (device loop2): using free space tree [ 262.368734][ T9353] loop0: detected capacity change from 0 to 65536 [ 262.430502][ T9353] XFS (loop0): Mounting V5 Filesystem [ 262.480811][ T9353] XFS (loop0): Ending clean mount [ 262.600063][ T4320] XFS (loop0): Unmounting Filesystem [ 262.675997][ T4321] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.873590][ T9394] loop3: detected capacity change from 0 to 4096 [ 262.895694][ T9394] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 262.903310][ T9365] loop1: detected capacity change from 0 to 65536 [ 262.920388][ T9394] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 263.020702][ T9365] XFS (loop1): Mounting V5 Filesystem [ 263.989798][ T9365] XFS (loop1): Ending clean mount [ 264.091939][ T9365] syz.1.927 (9365): drop_caches: 2 [ 264.331775][ T9399] loop2: detected capacity change from 0 to 40427 [ 264.339122][ T9399] F2FS-fs (loop2): invalid crc value [ 264.347675][ T9399] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 264.686310][ T9399] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 264.690513][ T9399] F2FS-fs (loop2): Start checkpoint disabled! [ 264.697445][ T4322] XFS (loop1): Unmounting Filesystem [ 264.785373][ T9399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 265.264034][ T9445] binder: 9444:9445 got transaction to invalid handle, 1 [ 265.268768][ T9445] binder: 9445:9444 cannot find target node [ 265.269847][ T9445] binder: 9444:9445 transaction call to 0:0 failed 15/29201/-22, size 12216-0 line 3045 [ 265.272235][ T4522] binder: undelivered TRANSACTION_ERROR: 29201 [ 265.365153][ T9448] bio_check_eod: 1704 callbacks suppressed [ 265.365168][ T9448] syz.2.929: attempt to access beyond end of device [ 265.365168][ T9448] loop2: rw=2049, sector=77824, nr_sectors = 3528 limit=40427 [ 265.372169][ T9448] syz.2.929: attempt to access beyond end of device [ 265.372169][ T9448] loop2: rw=2049, sector=81352, nr_sectors = 568 limit=40427 [ 265.388369][ T9448] syz.2.929: attempt to access beyond end of device [ 265.388369][ T9448] loop2: rw=2049, sector=49152, nr_sectors = 3824 limit=40427 [ 265.393373][ T9448] syz.2.929: attempt to access beyond end of device [ 265.393373][ T9448] loop2: rw=2049, sector=52976, nr_sectors = 272 limit=40427 [ 265.402678][ T9448] syz.2.929: attempt to access beyond end of device [ 265.402678][ T9448] loop2: rw=2049, sector=57344, nr_sectors = 2608 limit=40427 [ 265.411806][ T9448] syz.2.929: attempt to access beyond end of device [ 265.411806][ T9448] loop2: rw=2049, sector=59952, nr_sectors = 2048 limit=40427 [ 265.424639][ T9448] syz.2.929: attempt to access beyond end of device [ 265.424639][ T9448] loop2: rw=2049, sector=62000, nr_sectors = 3536 limit=40427 [ 265.428618][ T9448] syz.2.929: attempt to access beyond end of device [ 265.428618][ T9448] loop2: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 265.430769][ T9448] syz.2.929: attempt to access beyond end of device [ 265.430769][ T9448] loop2: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 265.432779][ T9448] syz.2.929: attempt to access beyond end of device [ 265.432779][ T9448] loop2: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 265.505604][ T9447] loop0: detected capacity change from 0 to 32768 [ 265.518277][ T9447] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 265.519922][ T9447] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 265.522283][ T9447] BTRFS info (device loop0): using free space tree [ 265.663232][ T9467] device syzkaller0 entered promiscuous mode [ 265.695702][ T9447] BTRFS info (device loop0): enabling ssd optimizations [ 265.959681][ T9477] loop1: detected capacity change from 0 to 128 [ 266.255931][ T4320] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 266.492766][ T9481] loop3: detected capacity change from 0 to 40427 [ 266.545858][ T9485] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 266.801959][ T9481] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 266.803296][ T9481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 266.811631][ T9481] F2FS-fs (loop3): invalid crc value [ 266.827375][ T9481] F2FS-fs (loop3): Found nat_bits in checkpoint [ 266.842337][ T9481] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 266.843459][ T9481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 267.049061][ T9487] loop2: detected capacity change from 0 to 65536 [ 267.091058][ T9487] XFS (loop2): Mounting V5 Filesystem [ 267.098792][ T9489] loop1: detected capacity change from 0 to 65536 [ 267.119285][ T9487] XFS (loop2): Ending clean mount [ 267.129051][ T9489] XFS (loop1): Mounting V5 Filesystem [ 267.137285][ T9487] syz.2.941 (9487): drop_caches: 2 [ 267.158395][ T9489] XFS (loop1): Ending clean mount [ 267.174284][ T9489] syz.1.942 (9489): drop_caches: 2 [ 267.174483][ T4321] XFS (loop2): Unmounting Filesystem [ 267.218100][ T4322] XFS (loop1): Unmounting Filesystem [ 267.386916][ T9515] loop3: detected capacity change from 0 to 2048 [ 267.391413][ T9515] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 267.392619][ T9515] UDF-fs: Scanning with blocksize 512 failed [ 267.401357][ T9515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.415830][ T9515] overlayfs: upper fs needs to support d_type. [ 267.417194][ T9515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 267.418318][ T9515] overlayfs: failed to set xattr on upper [ 267.419215][ T9515] overlayfs: ...falling back to index=off,metacopy=off. [ 267.512076][ T9512] loop0: detected capacity change from 0 to 65536 [ 267.556394][ T9512] XFS (loop0): Mounting V5 Filesystem [ 267.573871][ T9512] XFS (loop0): Ending clean mount [ 267.627348][ T9512] syz.0.947 (9512): drop_caches: 2 [ 267.663557][ T4320] XFS (loop0): Unmounting Filesystem [ 267.770355][ T9527] loop2: detected capacity change from 0 to 32768 [ 267.774932][ T9527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.943 (9527) [ 268.004121][ T9527] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.005859][ T9527] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 268.007215][ T9527] BTRFS info (device loop2): using free space tree [ 268.071606][ T9527] BTRFS info (device loop2): enabling ssd optimizations [ 268.130764][ T4321] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 268.188555][ T9549] binder: 9548:9549 ioctl 4018620d 0 returned -22 [ 268.192341][ T9549] binder: tried to use weak ref as strong ref [ 268.193314][ T9549] binder: 9548:9549 Acquire 1 refcount change on invalid ref 0 ret -22 [ 268.200956][ T9549] binder: 9548:9549 got transaction to invalid handle, 1 [ 268.213005][ T9549] binder: 9549:9548 cannot find target node [ 268.217238][ T9549] binder: 9548:9549 transaction call to 0:0 failed 18/29201/-22, size 12216-0 line 3045 [ 268.230737][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.214138][ T9567] device syzkaller0 entered promiscuous mode [ 269.314486][ T9555] loop4: detected capacity change from 0 to 40427 [ 269.327518][ T9555] F2FS-fs (loop4): invalid crc value [ 269.342536][ T9555] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 269.382240][ T9555] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 269.387377][ T9555] F2FS-fs (loop4): Start checkpoint disabled! [ 269.401773][ T9555] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 270.250606][ T9583] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 270.633180][ T9] bio_check_eod: 4059 callbacks suppressed [ 270.633191][ T9] kworker/u4:0: attempt to access beyond end of device [ 270.633191][ T9] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 270.746641][ T9569] loop3: detected capacity change from 0 to 65536 [ 270.764422][ T9576] loop1: detected capacity change from 0 to 40427 [ 270.766568][ T9576] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 270.768225][ T9576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 270.772635][ T9576] F2FS-fs (loop1): invalid crc value [ 270.773618][ T9569] XFS (loop3): Mounting V5 Filesystem [ 270.797765][ T9576] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.811786][ T9569] XFS (loop3): Ending clean mount [ 270.829864][ T9576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 270.831138][ T9576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.851821][ T9579] loop2: detected capacity change from 0 to 65536 [ 270.875037][ T9569] syz.3.955 (9569): drop_caches: 2 [ 270.922440][ T4333] XFS (loop3): Unmounting Filesystem [ 270.967576][ T9579] XFS (loop2): Mounting V5 Filesystem [ 271.014154][ T9579] XFS (loop2): Ending clean mount [ 271.064918][ T9579] syz.2.957 (9579): drop_caches: 2 [ 271.106097][ T1623] kworker/u4:4: attempt to access beyond end of device [ 271.106097][ T1623] loop1: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 271.212059][ T4321] XFS (loop2): Unmounting Filesystem [ 271.265988][ T9602] loop4: detected capacity change from 0 to 40427 [ 271.271813][ T9602] F2FS-fs (loop4): invalid crc value [ 271.273618][ T9602] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 271.292305][ T9602] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 271.293532][ T9602] F2FS-fs (loop4): Start checkpoint disabled! [ 271.295531][ T9602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 271.303690][ T9617] loop0: detected capacity change from 0 to 2048 [ 271.309584][ T9617] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 271.310717][ T9617] UDF-fs: Scanning with blocksize 512 failed [ 271.314061][ T9617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.319216][ T9617] overlayfs: upper fs needs to support d_type. [ 271.320465][ T9617] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 271.321462][ T9617] overlayfs: failed to set xattr on upper [ 271.322273][ T9617] overlayfs: ...falling back to index=off,metacopy=off. [ 271.595243][ T9621] syz.4.969: attempt to access beyond end of device [ 271.595243][ T9621] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 271.602730][ T9621] syz.4.969: attempt to access beyond end of device [ 271.602730][ T9621] loop4: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 271.614402][ T9621] syz.4.969: attempt to access beyond end of device [ 271.614402][ T9621] loop4: rw=2049, sector=49152, nr_sectors = 4080 limit=40427 [ 271.618611][ T9621] syz.4.969: attempt to access beyond end of device [ 271.618611][ T9621] loop4: rw=2049, sector=53232, nr_sectors = 16 limit=40427 [ 271.635940][ T9621] syz.4.969: attempt to access beyond end of device [ 271.635940][ T9621] loop4: rw=2049, sector=57344, nr_sectors = 7080 limit=40427 [ 271.643857][ T9621] syz.4.969: attempt to access beyond end of device [ 271.643857][ T9621] loop4: rw=2049, sector=64424, nr_sectors = 1112 limit=40427 [ 271.646481][ T9621] syz.4.969: attempt to access beyond end of device [ 271.646481][ T9621] loop4: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 271.648700][ T9621] syz.4.969: attempt to access beyond end of device [ 271.648700][ T9621] loop4: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 271.767582][ T9613] loop1: detected capacity change from 0 to 40427 [ 271.774087][ T9613] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 271.782221][ T9613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 271.791591][ T9613] F2FS-fs (loop1): invalid crc value [ 271.933028][ T9613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.954507][ T9613] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 271.956161][ T9613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 272.056578][ T9620] loop3: detected capacity change from 0 to 32768 [ 272.078366][ T9620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.959 (9620) [ 272.085088][ T9620] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.087236][ T9620] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 272.088764][ T9620] BTRFS info (device loop3): turning off barriers [ 272.089886][ T9620] BTRFS info (device loop3): setting nodatasum [ 272.093539][ T9620] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 272.100388][ T9620] BTRFS info (device loop3): use zstd compression, level 3 [ 272.102768][ T9620] BTRFS info (device loop3): using free space tree [ 272.390015][ T9651] loop2: detected capacity change from 0 to 512 [ 272.391893][ T9651] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.394108][ T9651] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 272.421610][ T9651] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 272.422934][ T9651] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 272.454489][ T9651] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 272.558958][ T4333] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.214827][ T9669] loop4: detected capacity change from 0 to 2048 [ 273.268955][ T9669] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 273.270304][ T9669] UDF-fs: Scanning with blocksize 512 failed [ 273.283085][ T9669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.305382][ T9669] overlayfs: missing 'lowerdir' [ 273.625665][ T4321] EXT4-fs (loop2): unmounting filesystem. [ 274.062645][ T9672] device syzkaller0 entered promiscuous mode [ 274.243643][ T9677] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 274.768125][ T9684] netlink: 14 bytes leftover after parsing attributes in process `syz.4.974'. [ 274.770688][ T9686] netlink: 'syz.4.974': attribute type 10 has an invalid length. [ 274.794713][ T9686] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 275.035545][ T9681] loop0: detected capacity change from 0 to 65536 [ 275.074439][ T9697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 275.075904][ T9697] UDF-fs: Scanning with blocksize 512 failed [ 275.082756][ T9697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.088319][ T9697] overlayfs: upper fs needs to support d_type. [ 275.089795][ T9697] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 275.090963][ T9697] overlayfs: failed to set xattr on upper [ 275.091835][ T9697] overlayfs: ...falling back to index=off,metacopy=off. [ 277.360741][ T9711] set_capacity_and_notify: 1 callbacks suppressed [ 277.360750][ T9711] loop3: detected capacity change from 0 to 40427 [ 277.372042][ T9711] F2FS-fs (loop3): invalid crc value [ 277.381801][ T9711] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 277.483429][ T9681] XFS (loop0): Mounting V5 Filesystem [ 277.492451][ T9711] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 277.494015][ T9711] F2FS-fs (loop3): Start checkpoint disabled! [ 277.506590][ T9711] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 278.283637][ T9744] bio_check_eod: 2027 callbacks suppressed [ 278.283650][ T9744] syz.3.978: attempt to access beyond end of device [ 278.283650][ T9744] loop3: rw=2049, sector=77824, nr_sectors = 3480 limit=40427 [ 278.289658][ T9744] syz.3.978: attempt to access beyond end of device [ 278.289658][ T9744] loop3: rw=2049, sector=81304, nr_sectors = 616 limit=40427 [ 278.300393][ T9744] syz.3.978: attempt to access beyond end of device [ 278.300393][ T9744] loop3: rw=2049, sector=49152, nr_sectors = 4080 limit=40427 [ 278.304468][ T9744] syz.3.978: attempt to access beyond end of device [ 278.304468][ T9744] loop3: rw=2049, sector=53232, nr_sectors = 16 limit=40427 [ 278.322766][ T9744] syz.3.978: attempt to access beyond end of device [ 278.322766][ T9744] loop3: rw=2049, sector=57344, nr_sectors = 7512 limit=40427 [ 278.329985][ T9744] syz.3.978: attempt to access beyond end of device [ 278.329985][ T9744] loop3: rw=2049, sector=64856, nr_sectors = 680 limit=40427 [ 278.332494][ T9744] syz.3.978: attempt to access beyond end of device [ 278.332494][ T9744] loop3: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 278.334584][ T9744] syz.3.978: attempt to access beyond end of device [ 278.334584][ T9744] loop3: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 278.336635][ T9744] syz.3.978: attempt to access beyond end of device [ 278.336635][ T9744] loop3: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 278.338588][ T9744] syz.3.978: attempt to access beyond end of device [ 278.338588][ T9744] loop3: rw=2049, sector=69656, nr_sectors = 8 limit=40427 [ 278.561616][ T9681] XFS (loop0): Ending clean mount [ 278.664096][ T4320] XFS (loop0): Unmounting Filesystem [ 278.756657][ T9752] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 279.161158][ T9751] loop1: detected capacity change from 0 to 32768 [ 279.259166][ T9751] XFS (loop1): Mounting V5 Filesystem [ 280.174771][ T9751] XFS (loop1): Ending clean mount [ 280.182250][ T9751] XFS (loop1): Quotacheck needed: Please wait. [ 280.194163][ T9751] XFS (loop1): Quotacheck: Done. [ 280.308715][ T9769] loop2: detected capacity change from 0 to 2048 [ 280.319695][ T9769] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 280.320948][ T9769] UDF-fs: Scanning with blocksize 512 failed [ 280.324346][ T9769] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.330011][ T9769] overlayfs: upper fs needs to support d_type. [ 280.331306][ T9769] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.332351][ T9769] overlayfs: failed to set xattr on upper [ 280.333203][ T9769] overlayfs: ...falling back to index=off,metacopy=off. [ 280.360999][ T4322] XFS (loop1): Unmounting Filesystem [ 280.499653][ T9767] loop3: detected capacity change from 0 to 40427 [ 280.533423][ T9767] F2FS-fs (loop3): invalid crc value [ 280.561073][ T9767] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 280.657215][ T9775] loop4: detected capacity change from 0 to 512 [ 281.657102][ T9767] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 281.673625][ T9767] F2FS-fs (loop3): Start checkpoint disabled! [ 281.693164][ T9767] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 281.714350][ T9775] EXT4-fs (loop4): 1 truncate cleaned up [ 281.715420][ T9775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 281.743750][ T9772] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.991: bg 0: block 465: padding at end of block bitmap is not set [ 281.746403][ T9772] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 281.748241][ T9772] EXT4-fs (loop4): This should not happen!! Data will be lost [ 281.748241][ T9772] [ 281.835277][ T9778] loop0: detected capacity change from 0 to 32768 [ 281.970695][ T4652] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 281.973104][ T4652] EXT4-fs (loop4): This should not happen!! Data will be lost [ 281.973104][ T4652] [ 281.976451][ T4652] EXT4-fs (loop4): Total free blocks count 0 [ 281.978516][ T4652] EXT4-fs (loop4): Free/Dirty block details [ 281.979407][ T4652] EXT4-fs (loop4): free_blocks=0 [ 281.982775][ T4652] EXT4-fs (loop4): dirty_blocks=65 [ 281.983674][ T4652] EXT4-fs (loop4): Block reservation details [ 282.026655][ T9778] XFS (loop0): Mounting V5 Filesystem [ 282.043595][ T9778] XFS (loop0): Ending clean mount [ 282.455734][ T4320] XFS (loop0): Unmounting Filesystem [ 282.673396][ T9803] loop4: detected capacity change from 0 to 32768 [ 283.509281][ T9803] XFS (loop4): Mounting V5 Filesystem [ 283.565958][ T9803] XFS (loop4): Ending clean mount [ 283.746400][ T9808] loop2: detected capacity change from 0 to 65536 [ 283.878650][ T9808] XFS (loop2): Mounting V5 Filesystem [ 283.956662][ T9845] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 284.241022][ T9808] XFS (loop2): Ending clean mount [ 284.249582][ T9808] syz.2.996 (9808): drop_caches: 2 [ 284.289500][ T4321] XFS (loop2): Unmounting Filesystem [ 284.488508][ T4328] XFS (loop4): Unmounting Filesystem [ 285.502240][ T9853] loop0: detected capacity change from 0 to 40427 [ 285.512403][ T9853] F2FS-fs (loop0): invalid crc value [ 285.540401][ T9853] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 285.558117][ T9853] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 285.559353][ T9853] F2FS-fs (loop0): Start checkpoint disabled! [ 285.565641][ T9853] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 285.708561][ T9860] tipc: Enabling of bearer rejected, failed to enable media [ 285.710226][ T9860] device syzkaller0 entered promiscuous mode [ 285.800996][ T9864] bio_check_eod: 3836 callbacks suppressed [ 285.801008][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.801008][ T9864] loop0: rw=2049, sector=77824, nr_sectors = 2712 limit=40427 [ 285.810819][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.810819][ T9864] loop0: rw=2049, sector=80536, nr_sectors = 1384 limit=40427 [ 285.826013][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.826013][ T9864] loop0: rw=2049, sector=49152, nr_sectors = 4080 limit=40427 [ 285.830378][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.830378][ T9864] loop0: rw=2049, sector=53232, nr_sectors = 16 limit=40427 [ 285.842264][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.842264][ T9864] loop0: rw=2049, sector=57344, nr_sectors = 4112 limit=40427 [ 285.855186][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.855186][ T9864] loop0: rw=2049, sector=61456, nr_sectors = 3728 limit=40427 [ 285.859899][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.859899][ T9864] loop0: rw=2049, sector=65184, nr_sectors = 352 limit=40427 [ 285.862281][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.862281][ T9864] loop0: rw=2049, sector=69632, nr_sectors = 8 limit=40427 [ 285.864315][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.864315][ T9864] loop0: rw=2049, sector=69640, nr_sectors = 8 limit=40427 [ 285.866482][ T9864] syz.0.1004: attempt to access beyond end of device [ 285.866482][ T9864] loop0: rw=2049, sector=69648, nr_sectors = 8 limit=40427 [ 287.017931][ T9878] loop4: detected capacity change from 0 to 2048 [ 287.041065][ T9878] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 287.042276][ T9878] UDF-fs: Scanning with blocksize 512 failed [ 287.065535][ T9878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.858987][ T9871] loop3: detected capacity change from 0 to 32768 [ 288.333861][ T9871] XFS (loop3): Mounting V5 Filesystem [ 288.527827][ T9899] loop0: detected capacity change from 0 to 512 [ 289.599560][ T9871] XFS (loop3): Ending clean mount [ 289.600900][ T9899] EXT4-fs (loop0): 1 truncate cleaned up [ 289.601744][ T9899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 289.619953][ T9897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1007: bg 0: block 465: padding at end of block bitmap is not set [ 289.622346][ T9897] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 289.624033][ T9897] EXT4-fs (loop0): This should not happen!! Data will be lost [ 289.624033][ T9897] [ 289.625578][ T9897] EXT4-fs (loop0): Total free blocks count 0 [ 289.626454][ T9897] EXT4-fs (loop0): Free/Dirty block details [ 289.627335][ T9897] EXT4-fs (loop0): free_blocks=0 [ 289.628097][ T9897] EXT4-fs (loop0): dirty_blocks=66 [ 289.628879][ T9897] EXT4-fs (loop0): Block reservation details [ 289.629722][ T9897] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 289.653106][ T4333] XFS (loop3): Unmounting Filesystem [ 289.787262][ T4449] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 289.981805][ T9905] loop1: detected capacity change from 0 to 65536 [ 290.033280][ T9902] loop4: detected capacity change from 0 to 65536 [ 290.052476][ T9902] XFS (loop4): Mounting V5 Filesystem [ 290.066631][ T9924] loop0: detected capacity change from 0 to 512 [ 290.092866][ T9902] XFS (loop4): Ending clean mount [ 290.096673][ T9924] EXT4-fs (loop0): 1 truncate cleaned up [ 290.097535][ T9924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.111650][ T9902] syz.4.1012 (9902): drop_caches: 2 [ 290.111666][ T9905] XFS (loop1): Mounting V5 Filesystem [ 290.274232][ T4328] XFS (loop4): Unmounting Filesystem [ 290.281446][ T9905] XFS (loop1): Ending clean mount [ 290.337894][ T9935] syz.1.1013 (9935): drop_caches: 2 [ 290.452126][ T9937] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 290.827617][ T4322] XFS (loop1): Unmounting Filesystem [ 292.053039][ T9958] loop2: detected capacity change from 0 to 2048 [ 292.074690][ T9903] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 292.139441][ T9958] Alternate GPT is invalid, using primary GPT. [ 292.140517][ T9958] loop2: p2 p3 p7 [ 292.172569][ T9960] loop1: detected capacity change from 0 to 2048 [ 292.188633][ T9960] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 292.192236][ T9960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.207407][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1021'. [ 293.421021][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 293.439014][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 293.442801][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 293.462257][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 293.509277][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 293.578206][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 293.906536][ T9986] loop1: detected capacity change from 0 to 128 [ 294.910618][ T9990] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 295.289095][ T9993] loop1: detected capacity change from 0 to 256 [ 295.312842][ T9993] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 295.469062][ T4320] EXT4-fs (loop0): unmounting filesystem. [ 295.480217][ T9980] loop3: detected capacity change from 0 to 65536 [ 295.516031][ T9980] XFS (loop3): Mounting V5 Filesystem [ 295.600775][T10010] loop0: detected capacity change from 0 to 2048 [ 295.637485][ T9980] XFS (loop3): Ending clean mount [ 295.677430][ T9980] syz.3.1026 (9980): drop_caches: 2 [ 295.694280][T10010] Alternate GPT is invalid, using primary GPT. [ 295.695544][T10010] loop0: p2 p3 p7 [ 296.006032][ T4333] XFS (loop3): Unmounting Filesystem [ 296.100873][ T6347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 296.155875][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 296.160050][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 296.696545][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 296.879040][T10039] loop3: detected capacity change from 0 to 2048 [ 297.517829][T10039] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 297.522526][T10039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.531523][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 297.613218][T10058] loop4: detected capacity change from 0 to 128 [ 298.519565][T10055] loop0: detected capacity change from 0 to 32768 [ 298.583975][T10055] XFS (loop0): Mounting V5 Filesystem [ 298.593142][T10055] XFS (loop0): Ending clean mount [ 298.701541][T10071] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 298.777789][T10076] loop3: detected capacity change from 0 to 256 [ 298.802691][T10076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 298.895508][T10051] XFS (loop0): Unmounting Filesystem [ 298.950786][T10080] loop4: detected capacity change from 0 to 2048 [ 298.986719][T10080] Alternate GPT is invalid, using primary GPT. [ 298.987958][T10080] loop4: p2 p3 p7 [ 299.133557][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 299.290755][T10082] loop3: detected capacity change from 0 to 65536 [ 299.336808][T10082] XFS (loop3): Mounting V5 Filesystem [ 299.340244][T10095] loop4: detected capacity change from 0 to 2048 [ 299.358578][T10082] XFS (loop3): Ending clean mount [ 299.369621][T10095] Alternate GPT is invalid, using primary GPT. [ 299.370791][T10095] loop4: p2 p3 p7 [ 299.383929][T10082] syz.3.1047 (10082): drop_caches: 2 [ 299.412575][ T4333] XFS (loop3): Unmounting Filesystem [ 299.461774][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1052'. [ 299.891905][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 299.899355][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 299.903286][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 299.933532][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 299.941188][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 299.944481][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 299.961119][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 299.964405][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 299.974846][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 300.065844][T10113] loop4: detected capacity change from 0 to 128 [ 301.643621][T10128] loop2: detected capacity change from 0 to 32768 [ 301.712173][T10128] XFS (loop2): Mounting V5 Filesystem [ 301.780681][T10142] loop1: detected capacity change from 0 to 512 [ 301.790478][T10128] XFS (loop2): Ending clean mount [ 301.792198][T10142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.810264][T10142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 301.811541][T10142] System zones: 1-12 [ 301.820577][T10142] EXT4-fs (loop1): 1 truncate cleaned up [ 301.823082][T10142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 302.246091][T10128] XFS (loop2): Unmounting Filesystem [ 302.392596][T10159] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 302.435109][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 302.603336][T10157] loop3: detected capacity change from 0 to 65536 [ 302.654915][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 303.356614][T10157] XFS (loop3): Mounting V5 Filesystem [ 303.439145][T10157] XFS (loop3): Ending clean mount [ 303.470887][T10157] syz.3.1063 (10157): drop_caches: 2 [ 303.578264][ T4333] XFS (loop3): Unmounting Filesystem [ 304.957479][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1075'. [ 304.993618][T10200] loop1: detected capacity change from 0 to 32768 [ 305.004493][T10200] XFS (loop1): Mounting V5 Filesystem [ 305.019262][T10200] XFS (loop1): Ending clean mount [ 305.107085][ T4322] XFS (loop1): Unmounting Filesystem [ 305.905875][T10237] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1081'. [ 305.913795][T10237] netlink: 'syz.0.1081': attribute type 10 has an invalid length. [ 305.937685][T10237] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 305.966410][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'. [ 306.142148][T10235] loop4: detected capacity change from 0 to 32768 [ 306.768477][T10235] XFS (loop4): Mounting V5 Filesystem [ 306.925769][T10235] XFS (loop4): Ending clean mount [ 307.039426][T10262] loop3: detected capacity change from 0 to 1024 [ 307.091439][T10263] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 307.175442][T10265] loop1: detected capacity change from 0 to 512 [ 307.181832][T10265] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 307.283006][T10265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 307.284435][T10265] System zones: 1-12 [ 307.302643][T10265] EXT4-fs (loop1): 1 truncate cleaned up [ 307.303574][T10265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 307.417043][T10235] XFS (loop4): Unmounting Filesystem [ 309.265643][ T4439] hfsplus: b-tree write err: -5, ino 4 [ 309.269305][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 309.344897][T10280] loop3: detected capacity change from 0 to 2048 [ 309.348748][T10280] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 309.353284][T10280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.366497][T10280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1088'. [ 309.871659][T10281] loop1: detected capacity change from 0 to 32768 [ 309.941598][T10281] XFS (loop1): Mounting V5 Filesystem [ 309.966720][T10281] XFS (loop1): Ending clean mount [ 310.054948][ T4322] XFS (loop1): Unmounting Filesystem [ 310.274638][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.277357][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.316165][T10308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1096'. [ 310.322331][T10308] netlink: 'syz.2.1096': attribute type 10 has an invalid length. [ 310.343508][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1096'. [ 310.354486][T10312] loop3: detected capacity change from 0 to 1024 [ 311.626095][T10320] netlink: 'syz.4.1100': attribute type 10 has an invalid length. [ 311.627293][T10320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1100'. [ 311.628931][T10320] batman_adv: batadv0: Adding interface: vlan1 [ 311.629753][T10320] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.633580][T10320] batman_adv: batadv0: Interface activated: vlan1 [ 311.873141][ T1623] hfsplus: b-tree write err: -5, ino 4 [ 312.051886][T10336] loop3: detected capacity change from 0 to 512 [ 312.055249][T10336] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.014139][T10336] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1101: invalid block [ 313.018523][T10336] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1101: invalid indirect mapped block 4294967295 (level 1) [ 313.023082][T10336] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1101: invalid indirect mapped block 4294967295 (level 1) [ 313.027668][T10336] EXT4-fs (loop3): 2 truncates cleaned up [ 313.028738][T10336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 313.103925][T10336] overlayfs: failed to resolve './bus': -2 [ 313.283773][T10341] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1101: bg 0: block 5: invalid block bitmap [ 313.660891][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'. [ 313.987660][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 314.099783][T10353] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 314.524357][T10346] loop1: detected capacity change from 0 to 32768 [ 314.580538][T10346] XFS (loop1): Mounting V5 Filesystem [ 314.623176][T10346] XFS (loop1): Ending clean mount [ 317.668229][ T4322] XFS (loop1): Unmounting Filesystem [ 317.793925][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 319.833943][T10419] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 319.835305][T10419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1123'. [ 319.837239][T10419] batman_adv: batadv0: Adding interface: vlan1 [ 319.838149][T10419] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.842954][T10419] batman_adv: batadv0: Interface activated: vlan1 [ 326.670468][T10429] loop3: detected capacity change from 0 to 512 [ 326.699977][T10429] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 326.716197][T10429] EXT4-fs: failed to create workqueue [ 326.717070][T10429] EXT4-fs (loop3): mount failed [ 326.845084][T10443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 326.870470][T10441] netlink: 'syz.0.1130': attribute type 10 has an invalid length. [ 326.871967][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1130'. [ 326.875185][T10441] batman_adv: batadv0: Adding interface: vlan1 [ 326.876158][T10441] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.880103][T10441] batman_adv: batadv0: Interface activated: vlan1 [ 327.436706][T10454] netlink: 'syz.4.1135': attribute type 10 has an invalid length. [ 327.437933][T10454] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1135'. [ 327.671428][T10436] loop1: detected capacity change from 0 to 32768 [ 327.698969][T10436] XFS (loop1): Mounting V5 Filesystem [ 327.746662][T10436] XFS (loop1): Ending clean mount [ 327.841294][T10442] loop3: detected capacity change from 0 to 65536 [ 328.998173][T10442] XFS (loop3): Mounting V5 Filesystem [ 329.668544][T10442] XFS (loop3): Ending clean mount [ 329.977223][ T4333] XFS (loop3): Unmounting Filesystem [ 330.027536][ T4322] XFS (loop1): Unmounting Filesystem [ 331.211984][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 334.011447][T10539] netlink: 'syz.0.1155': attribute type 39 has an invalid length. [ 335.067261][T10523] loop3: detected capacity change from 0 to 65536 [ 335.121943][T10523] XFS (loop3): Mounting V5 Filesystem [ 335.133295][T10523] XFS (loop3): Ending clean mount [ 335.134920][T10523] XFS (loop3): Quotacheck needed: Please wait. [ 335.152047][T10523] XFS (loop3): Quotacheck: Done. [ 339.463322][ T4333] XFS (loop3): Unmounting Filesystem [ 340.310333][T10571] loop1: detected capacity change from 0 to 512 [ 340.685921][T10571] EXT4-fs (loop1): 1 truncate cleaned up [ 340.686958][T10571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 340.796656][T10571] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1159: bg 0: block 465: padding at end of block bitmap is not set [ 340.800254][T10571] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 340.801978][T10571] EXT4-fs (loop1): This should not happen!! Data will be lost [ 340.801978][T10571] [ 341.715596][ T1623] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 341.717725][ T1623] EXT4-fs (loop1): This should not happen!! Data will be lost [ 341.717725][ T1623] [ 341.719345][ T1623] EXT4-fs (loop1): Total free blocks count 0 [ 341.720265][ T1623] EXT4-fs (loop1): Free/Dirty block details [ 341.721548][ T1623] EXT4-fs (loop1): free_blocks=0 [ 341.722515][ T1623] EXT4-fs (loop1): dirty_blocks=65 [ 341.723391][ T1623] EXT4-fs (loop1): Block reservation details [ 342.960023][T10598] loop1: detected capacity change from 0 to 512 [ 344.577172][T10598] EXT4-fs (loop1): 1 truncate cleaned up [ 344.578182][T10598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.600244][T10596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1170: bg 0: block 465: padding at end of block bitmap is not set [ 344.608163][T10596] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 344.609966][T10596] EXT4-fs (loop1): This should not happen!! Data will be lost [ 344.609966][T10596] [ 344.611452][T10596] EXT4-fs (loop1): Total free blocks count 0 [ 344.612300][T10596] EXT4-fs (loop1): Free/Dirty block details [ 344.613262][T10596] EXT4-fs (loop1): free_blocks=0 [ 344.614019][T10596] EXT4-fs (loop1): dirty_blocks=66 [ 344.614861][T10596] EXT4-fs (loop1): Block reservation details [ 344.615734][T10596] EXT4-fs (loop1): i_reserved_data_blocks=66 [ 344.870998][ T4404] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 344.930539][T10608] loop3: detected capacity change from 0 to 1024 [ 344.933781][T10609] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 344.941953][T10609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1174'. [ 346.191217][T10635] loop1: detected capacity change from 0 to 512 [ 346.197619][T10635] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 346.646406][T10635] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1180: invalid block [ 346.650475][T10635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1180: invalid indirect mapped block 4294967295 (level 1) [ 346.655413][T10635] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1180: invalid indirect mapped block 4294967295 (level 1) [ 346.659213][T10635] EXT4-fs (loop1): 2 truncates cleaned up [ 346.660094][T10635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 346.716084][T10635] overlayfs: failed to resolve './bus': -2 [ 346.901935][T10635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1180: bg 0: block 5: invalid block bitmap [ 348.377798][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 349.849320][ T4652] hfsplus: b-tree write err: -5, ino 4 [ 350.511669][T10655] loop1: detected capacity change from 0 to 65536 [ 350.536873][T10655] XFS (loop1): Mounting V5 Filesystem [ 350.561208][T10655] XFS (loop1): Ending clean mount [ 350.572570][T10655] syz.1.1183 (10655): drop_caches: 2 [ 350.596868][ T4322] XFS (loop1): Unmounting Filesystem [ 350.623235][T10667] loop3: detected capacity change from 0 to 32768 [ 350.632683][T10667] XFS (loop3): Mounting V5 Filesystem [ 350.732188][T10667] XFS (loop3): Ending clean mount [ 351.498545][T10699] netlink: 'syz.1.1193': attribute type 39 has an invalid length. [ 351.651558][ T4333] XFS (loop3): Unmounting Filesystem [ 355.410136][T10721] loop1: detected capacity change from 0 to 32768 [ 355.450738][T10739] loop3: detected capacity change from 0 to 1024 [ 355.541844][T10721] XFS (loop1): Mounting V5 Filesystem [ 355.607596][T10721] XFS (loop1): Ending clean mount [ 356.872562][ T4322] XFS (loop1): Unmounting Filesystem [ 358.385225][ T1623] hfsplus: b-tree write err: -5, ino 4 [ 361.446474][T10791] loop3: detected capacity change from 0 to 40427 [ 361.448370][T10791] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 361.449587][T10791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 361.451228][T10791] F2FS-fs (loop3): invalid crc value [ 361.518742][T10791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 362.091010][T10818] loop1: detected capacity change from 0 to 512 [ 362.142786][T10818] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 362.346830][T10818] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1228: invalid block [ 362.349349][T10818] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1228: invalid indirect mapped block 4294967295 (level 1) [ 362.351824][T10818] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1228: invalid indirect mapped block 4294967295 (level 1) [ 362.362307][T10818] EXT4-fs (loop1): 2 truncates cleaned up [ 362.363213][T10818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.438345][T10818] overlayfs: failed to resolve './bus': -2 [ 362.623581][T10821] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1228: bg 0: block 5: invalid block bitmap [ 362.683445][T10791] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 362.691224][T10791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 365.521271][ T4537] bio_check_eod: 1927 callbacks suppressed [ 365.521283][ T4537] kworker/u4:10: attempt to access beyond end of device [ 365.521283][ T4537] loop3: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 365.531616][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 369.313959][T10840] loop3: detected capacity change from 0 to 512 [ 369.404707][T10840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.446007][T10840] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1233: invalid indirect mapped block 4294967295 (level 1) [ 369.449416][T10840] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1233: invalid indirect mapped block 4294967295 (level 1) [ 369.451989][T10840] EXT4-fs (loop3): 2 truncates cleaned up [ 369.452949][T10840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 369.466458][T10840] overlayfs: failed to resolve './bus': -2 [ 369.553827][T10840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1233: bg 0: block 5: invalid block bitmap [ 370.672057][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 370.748301][T10865] loop3: detected capacity change from 0 to 2048 [ 370.792270][T10865] Alternate GPT is invalid, using primary GPT. [ 370.793321][T10865] loop3: p2 p3 p7 [ 370.970760][T10872] loop1: detected capacity change from 0 to 512 [ 370.973106][T10872] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 371.113575][T10872] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1243: invalid block [ 371.116494][T10872] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1243: invalid indirect mapped block 4294967295 (level 1) [ 371.119182][T10872] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1243: invalid indirect mapped block 4294967295 (level 1) [ 371.122508][T10872] EXT4-fs (loop1): 2 truncates cleaned up [ 371.123522][T10872] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 371.197976][T10872] overlayfs: failed to resolve './bus': -2 [ 371.434449][T10872] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1243: bg 0: block 5: invalid block bitmap [ 371.665879][ T3935] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 371.667409][ T3935] Buffer I/O error on dev loop3, logical block 0, async page read [ 371.668564][ T3935] ldm_validate_partition_table(): Disk read failed. [ 371.669506][ T3935] Dev loop3: unable to read RDB block 0 [ 371.670337][ T3935] loop3: unable to read partition table [ 371.671283][ T3935] loop3: partition table beyond EOD, truncated [ 371.676538][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.677648][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.273713][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 372.285379][T10877] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 372.286661][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1246'. [ 372.330488][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 372.360379][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 372.378361][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 372.409544][T10883] loop1: detected capacity change from 0 to 2048 [ 375.573632][T10885] loop3: detected capacity change from 0 to 2048 [ 375.611660][T10885] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 375.612961][T10885] UDF-fs: Scanning with blocksize 512 failed [ 375.623361][T10885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.628292][T10885] overlayfs: missing 'workdir' [ 375.687698][T10883] loop1: unable to read partition table [ 375.689802][T10883] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 376.054534][T10899] fuse: Bad value for 'fd' [ 376.738928][ T4312] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.342505][T10914] loop1: detected capacity change from 0 to 2048 [ 377.392506][T10914] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 377.393823][T10914] UDF-fs: Scanning with blocksize 512 failed [ 377.420184][T10914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.457276][T10914] overlayfs: missing 'workdir' [ 377.748925][T10919] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 377.750165][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1257'. [ 377.751944][T10919] batman_adv: batadv0: Adding interface: vlan1 [ 377.752924][T10919] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.757206][T10919] batman_adv: batadv0: Interface activated: vlan1 [ 379.335357][T10920] loop3: detected capacity change from 0 to 512 [ 379.342870][T10920] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 380.686643][T10920] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1256: invalid indirect mapped block 4294967295 (level 1) [ 380.690391][T10920] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1256: invalid indirect mapped block 4294967295 (level 1) [ 380.693050][T10920] EXT4-fs (loop3): 2 truncates cleaned up [ 380.693878][T10920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 380.704038][T10920] overlayfs: failed to resolve './bus': -2 [ 381.468651][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 381.765817][T10941] loop3: detected capacity change from 0 to 32768 [ 381.803034][T10941] XFS (loop3): Mounting V5 Filesystem [ 381.858686][T10941] XFS (loop3): Ending clean mount [ 383.702223][T10963] tipc: Enabling of bearer rejected, failed to enable media [ 383.916827][T10968] tipc: Enabled bearer , priority 0 [ 383.932395][T10968] tipc: Resetting bearer [ 384.098182][T10967] tipc: Disabling bearer [ 385.067054][ T4333] XFS (loop3): Unmounting Filesystem [ 387.309026][T11014] tipc: Enabled bearer , priority 0 [ 387.312437][T11014] tipc: Resetting bearer [ 387.733166][T11012] tipc: Disabling bearer [ 388.278853][T11008] loop1: detected capacity change from 0 to 65536 [ 388.388791][T11008] XFS (loop1): Mounting V5 Filesystem [ 388.424271][T11008] XFS (loop1): Ending clean mount [ 388.428109][T11008] XFS (loop1): Quotacheck needed: Please wait. [ 388.450741][T11008] XFS (loop1): Quotacheck: Done. [ 390.550186][ T4322] XFS (loop1): Unmounting Filesystem [ 390.859130][T11053] loop3: detected capacity change from 0 to 32768 [ 390.939063][T11063] tipc: Enabling of bearer rejected, failed to enable media [ 390.968726][T11053] XFS (loop3): Mounting V5 Filesystem [ 391.002813][T11053] XFS (loop3): Ending clean mount [ 391.007497][T11053] XFS (loop3): Quotacheck needed: Please wait. [ 391.032514][T11053] XFS (loop3): Quotacheck: Done. [ 391.519343][ T4333] XFS (loop3): Unmounting Filesystem [ 394.610344][T11113] tipc: Enabling of bearer rejected, failed to enable media [ 397.315865][T11154] loop3: detected capacity change from 0 to 2048 [ 397.325575][T11154] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 397.328031][T11154] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.377356][T11158] netlink: 'syz.3.1321': attribute type 10 has an invalid length. [ 397.378578][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1321'. [ 397.380366][T11158] batman_adv: batadv0: Adding interface: vlan1 [ 397.381253][T11158] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.385339][T11158] batman_adv: batadv0: Interface activated: vlan1 [ 397.414227][T11160] tipc: Enabled bearer , priority 0 [ 397.415891][T11160] device syzkaller0 entered promiscuous mode [ 397.456098][T11159] tipc: Resetting bearer [ 397.537841][T11159] tipc: Disabling bearer [ 397.890525][T11167] loop3: detected capacity change from 0 to 40427 [ 397.902801][T11167] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 397.910310][T11167] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 397.929520][T11167] F2FS-fs (loop3): invalid crc value [ 397.946834][T11167] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.959180][T11167] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 397.960344][T11167] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 398.723810][T11191] loop3: detected capacity change from 0 to 2048 [ 398.742169][T11191] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 398.758428][T11191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.339917][T11202] loop1: detected capacity change from 0 to 1024 [ 399.491867][T11196] loop3: detected capacity change from 0 to 32768 [ 399.548101][T11196] XFS (loop3): Mounting V5 Filesystem [ 399.569229][T11196] XFS (loop3): Ending clean mount [ 399.571109][T11196] XFS (loop3): Quotacheck needed: Please wait. [ 399.619919][T11196] XFS (loop3): Quotacheck: Done. [ 399.796444][T11214] tipc: Enabling of bearer rejected, failed to enable media [ 400.005757][T11222] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 400.306679][ T4333] XFS (loop3): Unmounting Filesystem [ 400.419280][ T4534] hfsplus: b-tree write err: -5, ino 4 [ 400.888981][T11231] loop1: detected capacity change from 0 to 40427 [ 400.897477][T11231] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 400.899914][T11231] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 400.903543][T11231] F2FS-fs (loop1): invalid crc value [ 400.920987][T11231] F2FS-fs (loop1): Found nat_bits in checkpoint [ 400.937805][T11231] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 400.938953][T11231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 401.348027][T11251] tipc: Enabling of bearer rejected, failed to enable media [ 402.891644][ T9] kworker/u4:0: attempt to access beyond end of device [ 402.891644][ T9] loop1: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 403.299742][T11275] loop1: detected capacity change from 0 to 2048 [ 403.323751][T11275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.513976][T11281] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 404.515339][T11281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1354'. [ 404.987112][T11285] loop1: detected capacity change from 0 to 2048 [ 405.008233][T11285] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 405.095311][T11285] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 405.403170][T11295] tipc: Enabling of bearer rejected, failed to enable media [ 405.490267][T11293] loop1: detected capacity change from 0 to 32768 [ 405.610078][T11310] loop3: detected capacity change from 0 to 512 [ 405.632361][T11310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.870022][T11293] XFS (loop1): Mounting V5 Filesystem [ 405.917221][T11310] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1364: invalid block [ 405.920216][T11310] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1364: invalid indirect mapped block 4294967295 (level 1) [ 405.922740][T11310] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1364: invalid indirect mapped block 4294967295 (level 1) [ 405.925920][T11310] EXT4-fs (loop3): 2 truncates cleaned up [ 405.926947][T11310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 406.149041][T11312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 406.676173][T11293] XFS (loop1): Ending clean mount [ 406.677969][T11293] XFS (loop1): Quotacheck needed: Please wait. [ 406.698714][T11293] XFS (loop1): Quotacheck: Done. [ 407.093742][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 407.205558][ T4322] XFS (loop1): Unmounting Filesystem [ 407.406887][T11323] loop3: detected capacity change from 0 to 32768 [ 407.450450][T11323] XFS (loop3): Mounting V5 Filesystem [ 407.498587][T11323] XFS (loop3): Ending clean mount [ 408.635468][ T4333] XFS (loop3): Unmounting Filesystem [ 410.173543][T11386] tipc: Enabled bearer , priority 0 [ 410.178059][T11386] device syzkaller0 entered promiscuous mode [ 410.184144][T11386] tipc: Resetting bearer [ 410.203448][T11385] tipc: Resetting bearer [ 410.265305][T11385] tipc: Disabling bearer [ 410.291294][T11380] loop1: detected capacity change from 0 to 32768 [ 410.393465][T11380] XFS (loop1): Mounting V5 Filesystem [ 410.434199][T11380] XFS (loop1): Ending clean mount [ 410.438966][T11380] XFS (loop1): Quotacheck needed: Please wait. [ 410.464773][T11380] XFS (loop1): Quotacheck: Done. [ 410.811841][T11408] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 410.813183][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1382'. [ 411.262424][ T4322] XFS (loop1): Unmounting Filesystem [ 411.873871][T11425] netlink: 'syz.1.1385': attribute type 39 has an invalid length. [ 412.469798][T11447] tipc: Enabling of bearer rejected, failed to enable media [ 412.926544][T11460] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 412.927755][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1395'. [ 413.738618][T11486] tipc: Enabling of bearer rejected, failed to enable media [ 414.224723][T11499] netlink: 'syz.4.1406': attribute type 39 has an invalid length. [ 414.843943][T11505] loop3: detected capacity change from 0 to 65536 [ 414.852955][T11509] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 414.854339][T11509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 414.885833][T11505] XFS (loop3): Mounting V5 Filesystem [ 414.920948][T11505] XFS (loop3): Ending clean mount [ 414.928808][T11517] loop1: detected capacity change from 0 to 2048 [ 414.939055][T11505] syz.3.1407 (11505): drop_caches: 2 [ 414.950246][ T4333] XFS (loop3): Unmounting Filesystem [ 415.008516][T11517] Alternate GPT is invalid, using primary GPT. [ 415.010801][T11517] loop1: p2 p3 p7 [ 415.158812][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 415.166035][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 415.174524][ T6347] udevd[6347]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 417.181867][T11568] netlink: 'syz.2.1422': attribute type 10 has an invalid length. [ 417.183344][T11568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1422'. [ 417.922663][T11576] loop1: detected capacity change from 0 to 32768 [ 417.966720][T11576] XFS (loop1): Mounting V5 Filesystem [ 417.980554][T11563] loop3: detected capacity change from 0 to 65536 [ 417.990199][T11576] XFS (loop1): Ending clean mount [ 417.992911][T11576] XFS (loop1): Quotacheck needed: Please wait. [ 418.020262][T11563] XFS (loop3): Mounting V5 Filesystem [ 418.028530][T11576] XFS (loop1): Quotacheck: Done. [ 418.090586][T11563] XFS (loop3): Ending clean mount [ 418.112642][T11563] syz.3.1420 (11563): drop_caches: 2 [ 418.149901][ T4333] XFS (loop3): Unmounting Filesystem [ 419.352461][ T4322] XFS (loop1): Unmounting Filesystem [ 419.393124][T11616] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 419.394797][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1434'. [ 419.797312][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1436'. [ 420.815649][T11643] loop1: detected capacity change from 0 to 1024 [ 421.593444][T11662] loop3: detected capacity change from 0 to 1024 [ 421.613126][T11664] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 421.614442][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1446'. [ 421.620695][ T4537] hfsplus: b-tree write err: -5, ino 4 [ 421.649738][T11666] loop1: detected capacity change from 0 to 1024 [ 422.660038][ T4652] hfsplus: b-tree write err: -5, ino 4 [ 423.472695][ T4537] hfsplus: b-tree write err: -5, ino 4 [ 424.597487][T11716] loop1: detected capacity change from 0 to 1024 [ 425.676411][T11731] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 425.714475][T11720] loop3: detected capacity change from 0 to 40427 [ 425.715008][ T1623] hfsplus: b-tree write err: -5, ino 4 [ 425.720478][T11720] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 425.721826][T11720] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 425.733926][T11720] F2FS-fs (loop3): invalid crc value [ 425.817341][T11720] F2FS-fs (loop3): Found nat_bits in checkpoint [ 425.830316][T11720] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 425.831544][T11720] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 426.484060][ T4534] kworker/u4:9: attempt to access beyond end of device [ 426.484060][ T4534] loop3: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 426.684114][T11771] tipc: Enabled bearer , priority 0 [ 426.691652][T11771] device syzkaller0 entered promiscuous mode [ 426.699807][T11771] tipc: Resetting bearer [ 426.703010][T11770] tipc: Resetting bearer [ 426.775336][T11770] tipc: Disabling bearer [ 427.156981][T11780] device macsec0 entered promiscuous mode [ 427.160471][T11778] loop3: detected capacity change from 0 to 32768 [ 427.226314][T11778] XFS (loop3): Mounting V5 Filesystem [ 427.238664][T11778] XFS (loop3): Ending clean mount [ 427.240553][T11778] XFS (loop3): Quotacheck needed: Please wait. [ 427.258395][T11778] XFS (loop3): Quotacheck: Done. [ 428.160008][ T4333] XFS (loop3): Unmounting Filesystem [ 428.937203][T11834] tipc: Enabling of bearer rejected, failed to enable media [ 428.963700][T11819] loop3: detected capacity change from 0 to 40427 [ 428.982490][T11819] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 428.984206][T11819] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 428.990009][T11819] F2FS-fs (loop3): invalid crc value [ 429.025999][T11819] F2FS-fs (loop3): Found nat_bits in checkpoint [ 429.054984][T11819] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 429.056195][T11819] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 429.157604][T11846] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 429.159036][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1490'. [ 429.462127][T11858] fuse: Bad value for 'fd' [ 429.603412][ T4534] kworker/u4:9: attempt to access beyond end of device [ 429.603412][ T4534] loop3: rw=1, sector=77824, nr_sectors = 136 limit=40427 [ 429.916671][T11860] loop3: detected capacity change from 0 to 1024 [ 430.990965][ T39] hfsplus: b-tree write err: -5, ino 4 [ 431.122719][T11887] tipc: Enabled bearer , priority 0 [ 431.124286][T11887] device syzkaller0 entered promiscuous mode [ 431.133039][T11887] tipc: Resetting bearer [ 431.135248][T11886] tipc: Resetting bearer [ 431.721645][T11886] tipc: Disabling bearer [ 431.981888][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.984326][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.989249][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.991516][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.185678][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.188734][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.403460][T11957] tipc: Enabling of bearer rejected, failed to enable media [ 436.379574][T12010] tipc: Enabled bearer , priority 0 [ 436.380963][T12010] device syzkaller0 entered promiscuous mode [ 436.386954][T12010] tipc: Resetting bearer [ 436.419441][T12009] tipc: Resetting bearer [ 436.522031][T12009] tipc: Disabling bearer [ 436.852546][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'. [ 436.984361][T12033] tipc: Enabled bearer , priority 0 [ 436.987300][T12033] device syzkaller0 entered promiscuous mode [ 437.081881][T12033] tipc: Resetting bearer [ 437.085752][T12032] tipc: Resetting bearer [ 437.125475][T12032] tipc: Disabling bearer [ 438.192116][T12059] loop3: detected capacity change from 0 to 1024 [ 438.204870][T12060] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 438.214730][T12060] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1542'. [ 438.332758][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 439.105004][ T319] hfsplus: b-tree write err: -5, ino 4 [ 439.113293][T12088] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 439.311919][T12093] tipc: Enabling of bearer rejected, failed to enable media [ 439.380891][T12078] loop1: detected capacity change from 0 to 65536 [ 439.509378][T12105] fuse: Bad value for 'fd' [ 439.576349][T12078] XFS (loop1): Mounting V5 Filesystem [ 439.800746][T12090] loop3: detected capacity change from 0 to 32768 [ 439.863253][T12114] netlink: 'syz.0.1555': attribute type 10 has an invalid length. [ 439.864776][T12114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1555'. [ 439.886552][T12078] XFS (loop1): Ending clean mount [ 439.888060][T12078] XFS (loop1): Quotacheck needed: Please wait. [ 439.916536][T12078] XFS (loop1): Quotacheck: Done. [ 439.998590][T12090] XFS (loop3): Mounting V5 Filesystem [ 440.032161][T12090] XFS (loop3): Ending clean mount [ 440.034095][T12090] XFS (loop3): Quotacheck needed: Please wait. [ 440.868993][ T4322] XFS (loop1): Unmounting Filesystem [ 440.974060][T12090] XFS (loop3): Quotacheck: Done. [ 441.598308][ T4333] XFS (loop3): Unmounting Filesystem [ 442.227733][T12157] tipc: Enabling of bearer rejected, failed to enable media [ 442.395260][T12163] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 442.645575][T12178] loop3: detected capacity change from 0 to 512 [ 442.658551][T12178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.665506][T12178] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1562: invalid block [ 442.667743][T12178] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1562: invalid indirect mapped block 4294967295 (level 1) [ 442.670062][T12178] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1562: invalid indirect mapped block 4294967295 (level 1) [ 442.673541][T12178] EXT4-fs (loop3): 2 truncates cleaned up [ 442.674431][T12178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 444.069057][T12190] loop1: detected capacity change from 0 to 32768 [ 444.208079][T12190] XFS (loop1): Mounting V5 Filesystem [ 444.602023][T12190] XFS (loop1): Ending clean mount [ 444.605845][T12190] XFS (loop1): Quotacheck needed: Please wait. [ 444.633203][T12190] XFS (loop1): Quotacheck: Done. [ 445.406448][ T4322] XFS (loop1): Unmounting Filesystem [ 445.668848][T12223] tipc: Enabling of bearer rejected, failed to enable media [ 446.428711][T12252] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 446.430559][T12252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1594'. [ 447.925044][T12182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 448.399259][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 448.515438][T12297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.516893][T12297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.537528][T12299] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 448.538863][T12299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1597'. [ 448.670676][T12292] loop1: detected capacity change from 0 to 32768 [ 449.634289][T12292] XFS (loop1): Mounting V5 Filesystem [ 449.675357][T12292] XFS (loop1): Ending clean mount [ 449.677101][T12292] XFS (loop1): Quotacheck needed: Please wait. [ 449.984514][T12292] XFS (loop1): Quotacheck: Done. [ 450.902949][ T4322] XFS (loop1): Unmounting Filesystem [ 454.532338][T12423] tipc: Enabled bearer , priority 0 [ 454.534034][T12423] device syzkaller0 entered promiscuous mode [ 455.001260][T12433] tipc: Resetting bearer [ 455.022397][T12422] tipc: Resetting bearer [ 455.101386][T12425] loop3: detected capacity change from 0 to 32768 [ 455.117785][T12422] tipc: Disabling bearer [ 455.130522][T12425] XFS (loop3): Mounting V5 Filesystem [ 455.144413][T12425] XFS (loop3): Ending clean mount [ 455.146186][T12425] XFS (loop3): Quotacheck needed: Please wait. [ 455.172272][T12425] XFS (loop3): Quotacheck: Done. [ 456.385773][ T4333] XFS (loop3): Unmounting Filesystem [ 462.012504][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.013952][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.157042][T12582] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 462.158230][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1669'. [ 464.832583][T12613] netlink: 'syz.2.1681': attribute type 10 has an invalid length. [ 464.833873][T12613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1681'. [ 467.110452][T12652] loop1: detected capacity change from 0 to 32768 [ 467.192678][T12652] XFS (loop1): Mounting V5 Filesystem [ 467.252916][T12652] XFS (loop1): Ending clean mount [ 467.257964][T12652] XFS (loop1): Quotacheck needed: Please wait. [ 467.963381][T12652] XFS (loop1): Quotacheck: Done. [ 468.738151][T12699] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present [ 470.199614][ T4322] XFS (loop1): Unmounting Filesystem [ 471.124724][T12713] loop3: detected capacity change from 0 to 32768 [ 471.147749][T12713] XFS (loop3): Mounting V5 Filesystem [ 471.169744][T12713] XFS (loop3): Ending clean mount [ 471.172380][T12713] XFS (loop3): Quotacheck needed: Please wait. [ 471.199563][T12713] XFS (loop3): Quotacheck: Done. [ 471.705030][ T4333] XFS (loop3): Unmounting Filesystem [ 472.984302][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.986132][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.776948][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.778373][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.231143][T12850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.713442][T12893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.452212][T12936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.956240][T12964] device macsec0 entered promiscuous mode [ 489.102310][T12987] xt_TPROXY: Can be used only with -p tcp or -p udp [ 490.832985][T13015] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1791'. [ 491.065642][T13025] Cannot find add_set index 0 as target [ 493.212827][T13053] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1806'. [ 494.052334][T13036] loop1: detected capacity change from 0 to 65536 [ 494.417717][T13036] XFS (loop1): Mounting V5 Filesystem [ 494.492847][T13036] XFS (loop1): Ending clean mount [ 494.494360][T13036] XFS (loop1): Quotacheck needed: Please wait. [ 494.516640][T13036] XFS (loop1): Quotacheck: Done. [ 494.558493][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.560158][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.246831][T13082] Cannot find del_set index 4 as target [ 495.464061][ T4322] XFS (loop1): Unmounting Filesystem [ 495.489818][T13090] qfq: no options [ 496.940949][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1817'. [ 500.112165][ T27] audit: type=1326 audit(500.100:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.123411][ T27] audit: type=1326 audit(500.110:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.134483][ T27] audit: type=1326 audit(500.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.161647][T13168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1832'. [ 500.163808][T13135] loop1: detected capacity change from 0 to 32768 [ 500.168818][ T27] audit: type=1326 audit(500.160:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.187167][ T27] audit: type=1326 audit(500.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.630503][ T27] audit: type=1326 audit(500.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.633914][ T27] audit: type=1326 audit(500.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.649481][ T27] audit: type=1326 audit(500.640:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.652789][ T27] audit: type=1326 audit(500.640:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.657458][T13135] XFS (loop1): Mounting V5 Filesystem [ 500.730804][ T27] audit: type=1326 audit(500.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13150 comm="syz.4.1828" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 500.773680][T13135] XFS (loop1): Ending clean mount [ 501.287712][T13181] Cannot find del_set index 4 as target [ 501.903196][ T4322] XFS (loop1): Unmounting Filesystem [ 504.578809][T13237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1844'. [ 505.937985][T13263] Cannot find del_set index 4 as target [ 506.674919][T13275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1856'. [ 506.684253][T13243] loop1: detected capacity change from 0 to 32768 [ 508.910041][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 508.910053][ T27] audit: type=1326 audit(508.900:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 509.664423][ T27] audit: type=1326 audit(509.650:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.4.1866" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 510.023605][T13311] loop3: detected capacity change from 0 to 65536 [ 510.357662][T13311] XFS (loop3): Mounting V5 Filesystem [ 510.402261][T13311] XFS (loop3): Ending clean mount [ 510.404130][T13311] XFS (loop3): Quotacheck needed: Please wait. [ 510.430065][T13311] XFS (loop3): Quotacheck: Done. [ 511.343579][ T4333] XFS (loop3): Unmounting Filesystem [ 512.749586][ T27] audit: type=1326 audit(512.740:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 512.755810][ T27] audit: type=1326 audit(512.750:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 512.759442][ T27] audit: type=1326 audit(512.750:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 512.775012][ T27] audit: type=1326 audit(512.770:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 512.791535][ T27] audit: type=1326 audit(512.780:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 513.155783][ T27] audit: type=1326 audit(513.150:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 513.172945][ T27] audit: type=1326 audit(513.150:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 513.176592][ T27] audit: type=1326 audit(513.150:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.1.1878" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8a776b68 code=0x7ffc0000 [ 513.327129][ T4537] Bluetooth: hci5: Frame reassembly failed (-84) [ 514.182970][T13412] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.404711][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 515.406031][ T4331] Bluetooth: hci5: command 0x1003 tx timeout [ 516.155181][T13440] Cannot find add_set index 0 as target [ 517.117471][T13460] xt_TPROXY: Can be used only with -p tcp or -p udp [ 518.587025][T13467] loop1: detected capacity change from 0 to 65536 [ 518.594360][T13467] XFS (loop1): Mounting V5 Filesystem [ 518.620611][T13467] XFS (loop1): Ending clean mount [ 518.622209][T13467] XFS (loop1): Quotacheck needed: Please wait. [ 518.641965][T13467] XFS (loop1): Quotacheck: Done. [ 519.170877][ T4322] XFS (loop1): Unmounting Filesystem [ 522.890929][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 522.890939][ T27] audit: type=1326 audit(522.880:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.896975][ T27] audit: type=1326 audit(522.890:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.909862][ T27] audit: type=1326 audit(522.900:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=274 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.915477][ T27] audit: type=1326 audit(522.900:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.923831][ T27] audit: type=1326 audit(522.910:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.942260][ T27] audit: type=1326 audit(522.910:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.951530][ T27] audit: type=1326 audit(522.920:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.955572][ T27] audit: type=1326 audit(522.940:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=59 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 522.959107][ T27] audit: type=1326 audit(522.940:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 523.057099][ T27] audit: type=1326 audit(522.970:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13546 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb0976b68 code=0x7ffc0000 [ 525.075763][T13586] binder: 13585:13586 ioctl 4018620d 0 returned -22 [ 525.077669][T13586] binder: 13585:13586 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 525.083638][T13586] binder: 13585:13586 got transaction to invalid handle, 1 [ 525.087670][T13586] binder: 13586:13585 cannot find target node [ 525.088774][T13586] binder: 13585:13586 transaction async to 0:0 failed 21/29201/-22, size 104-24 line 3045 [ 525.091693][ T4760] binder: undelivered TRANSACTION_ERROR: 29201 [ 527.969983][ T4331] Bluetooth: hci5: command 0x1003 tx timeout [ 527.972174][ T4332] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 528.032712][T13609] loop3: detected capacity change from 0 to 65536 [ 528.490232][T13609] XFS (loop3): Mounting V5 Filesystem [ 528.550973][T13609] XFS (loop3): Ending clean mount [ 528.552641][T13609] XFS (loop3): Quotacheck needed: Please wait. [ 528.588912][T13609] XFS (loop3): Quotacheck: Done. [ 529.537733][ T4333] XFS (loop3): Unmounting Filesystem [ 530.848582][T13702] loop1: detected capacity change from 0 to 1024 [ 531.090825][T13702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.130973][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 531.513263][T13724] loop1: detected capacity change from 0 to 512 [ 531.528966][T13724] EXT4-fs (loop1): orphan cleanup on readonly fs [ 531.530034][T13724] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 531.531884][T13724] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 531.566428][T13724] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1972: attempt to clear invalid blocks 2 len 1 [ 531.570959][T13724] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1972: invalid indirect mapped block 1819239214 (level 0) [ 531.573629][T13724] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1972: invalid indirect mapped block 1819239214 (level 1) [ 531.583752][T13724] EXT4-fs (loop1): 1 truncate cleaned up [ 531.584920][T13724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 531.598111][T13724] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.1972: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 531.615237][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 532.214743][ T4332] Bluetooth: Wrong link type (-57) [ 532.239371][T13766] capability: warning: `syz.0.1989' uses deprecated v2 capabilities in a way that may be insecure [ 532.334881][T13771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 532.744136][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.748141][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.792970][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 533.051217][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 533.051227][ T27] audit: type=1326 audit(533.040:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.058539][ T27] audit: type=1326 audit(533.040:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.072101][ T27] audit: type=1326 audit(533.050:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.083387][ T27] audit: type=1326 audit(533.050:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.095095][ T27] audit: type=1326 audit(533.050:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.100550][ T27] audit: type=1326 audit(533.050:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=66 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.106590][ T27] audit: type=1326 audit(533.050:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.109729][ T27] audit: type=1326 audit(533.050:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.4.2008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb76b68 code=0x7ffc0000 [ 533.186747][T13851] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.495514][T13901] 9pnet_fd: Insufficient options for proto=fd [ 534.341256][T13939] netlink: 'syz.0.2045': attribute type 4 has an invalid length. [ 534.910312][T13960] loop1: detected capacity change from 0 to 2048 [ 534.925479][T13964] loop3: detected capacity change from 0 to 128 [ 534.933353][T13964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 534.964799][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 534.965855][T13960] loop1: p1 p2 < > p3 < p5 p6 > p4 [ 534.966650][T13960] loop1: partition table partially beyond EOD, truncated [ 534.967917][T13960] loop1: p1 size 196608 extends beyond EOD, truncated [ 534.978314][T13960] loop1: p2 start 4278190080 is beyond EOD, truncated [ 534.982903][T13960] loop1: p4 size 64000 extends beyond EOD, truncated [ 534.986384][T13960] loop1: p5 size 196608 extends beyond EOD, truncated [ 534.990257][T13960] loop1: p6 size 64000 extends beyond EOD, truncated [ 535.012319][T13970] loop3: detected capacity change from 0 to 764 [ 535.271752][T13970] mmap: syz.3.2057 (13970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 535.546619][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 535.550956][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 535.561273][T13994] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 535.568814][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 535.583598][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 535.588072][ T4593] udevd[4593]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 535.603271][ T4312] udevd[4312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 535.616801][ T4314] udevd[4314]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 535.642093][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 535.979151][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 536.003381][ T4593] udevd[4593]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 536.050932][T14012] loop3: detected capacity change from 0 to 128 [ 536.331076][T14012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 536.355255][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 536.617418][T14035] loop1: detected capacity change from 0 to 512 [ 536.636832][T14035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 536.669314][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 537.139606][T14046] device wlan0 entered promiscuous mode [ 537.959759][T13398] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 537.961527][T13398] CPU: 1 PID: 13398 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 537.962645][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 537.964136][T13398] Workqueue: hci4 hci_rx_work [ 537.964840][T13398] Call trace: [ 537.965277][T13398] dump_backtrace+0x1c0/0x1ec [ 537.965966][T13398] show_stack+0x2c/0x3c [ 537.966590][T13398] __dump_stack+0x30/0x40 [ 537.967241][T13398] dump_stack_lvl+0xf4/0x15c [ 537.967923][T13398] dump_stack+0x1c/0x5c [ 537.968527][T13398] sysfs_create_dir_ns+0x244/0x264 [ 537.969276][T13398] kobject_add_internal+0x598/0xb08 [ 537.970036][T13398] kobject_add+0x140/0x20c [ 537.970686][T13398] device_add+0x3f0/0xf90 [ 537.971304][T13398] hci_conn_add_sysfs+0xbc/0x1c8 [ 537.971960][T13398] le_conn_complete_evt+0xcc8/0x1244 [ 537.972757][T13398] hci_le_enh_conn_complete_evt+0x114/0x3f4 [ 537.973561][T13398] hci_le_meta_evt+0x2c0/0x4a0 [ 537.974251][T13398] hci_event_packet+0x6b8/0xf18 [ 537.974925][T13398] hci_rx_work+0x324/0xa80 [ 537.975605][T13398] process_one_work+0x7f8/0x13a4 [ 537.976359][T13398] worker_thread+0x8c4/0xfec [ 537.977033][T13398] kthread+0x250/0x2d8 [ 537.977624][T13398] ret_from_fork+0x10/0x20 [ 537.979668][T13398] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 537.981778][T13398] Bluetooth: hci4: failed to register connection device [ 537.987330][T14083] IPv6: NLM_F_CREATE should be specified when creating new route [ 538.369615][T14095] fuse: Bad value for 'fd' [ 538.779658][T13398] Bluetooth: hci4: ISO packet too small [ 538.887545][T14106] netlink: 'syz.4.2110': attribute type 29 has an invalid length. [ 538.888952][T14106] netlink: 'syz.4.2110': attribute type 29 has an invalid length. [ 538.891864][T14106] netlink: 'syz.4.2110': attribute type 29 has an invalid length. [ 539.182975][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2114'. [ 540.166595][T14127] loop3: detected capacity change from 0 to 512 [ 540.216158][T14131] Bluetooth: MGMT ver 1.22 [ 540.229056][T14127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 540.252361][ T4333] EXT4-fs (loop3): unmounting filesystem. [ 540.305411][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 540.327347][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.328588][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.342533][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.344196][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 540.359338][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 543.120814][T14202] loop1: detected capacity change from 0 to 8 [ 544.479883][T14244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2164'. [ 544.963580][T13398] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 545.162457][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2180'. [ 545.723024][T14298] loop1: detected capacity change from 0 to 1024 [ 545.756281][ T4413] hfsplus: b-tree write err: -5, ino 4 [ 547.049949][T13398] Bluetooth: hci1: command 0x0409 tx timeout [ 547.514699][ T4332] Bluetooth: hci2: command 0x206e tx timeout [ 549.153285][T13398] Bluetooth: hci4: command 0x206e tx timeout [ 549.176072][ T4332] Bluetooth: hci1: command 0x206e tx timeout [ 549.594610][ T4332] Bluetooth: hci2: command 0x206e tx timeout [ 549.816860][T14389] Cannot find add_set index 0 as target [ 551.304430][T13398] Bluetooth: hci4: command 0x206e tx timeout [ 551.304459][ T4332] Bluetooth: hci1: command 0x206e tx timeout [ 553.574981][ T4331] Bluetooth: hci1: command 0x206e tx timeout [ 554.845679][T14466] Cannot find del_set index 4 as target [ 555.977556][ T4331] Bluetooth: hci1: command 0x206e tx timeout [ 556.005164][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.007960][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 559.044298][T14485] loop3: detected capacity change from 0 to 65536 [ 559.108028][T14485] XFS (loop3): Mounting V5 Filesystem [ 559.134000][T14485] XFS (loop3): Ending clean mount [ 559.135760][T14485] XFS (loop3): Quotacheck needed: Please wait. [ 559.155837][T14485] XFS (loop3): Quotacheck: Done. [ 559.947319][ T4333] XFS (loop3): Unmounting Filesystem [ 561.771251][ C1] ------------[ cut here ]------------ [ 561.772356][ C1] WARNING: CPU: 1 PID: 14553 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0xf60/0x12bc [ 561.773873][ C1] Modules linked in: [ 561.774482][ C1] CPU: 1 PID: 14553 Comm: syz.1.2252 Not tainted syzkaller #0 [ 561.775656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 561.777187][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 561.778395][ C1] pc : __ieee80211_beacon_get+0xf60/0x12bc [ 561.779276][ C1] lr : __ieee80211_beacon_get+0xf60/0x12bc [ 561.780117][ C1] sp : ffff800008017a90 [ 561.780782][ C1] x29: ffff800008017ad0 x28: ffffffffffffe4f0 x27: 0000000000000001 [ 561.781930][ C1] x26: 0000000000000041 x25: ffff0000f6246c00 x24: 0000000000000000 [ 561.783139][ C1] x23: ffff0000d9ac0ea0 x22: ffff800008017b3c x21: ffff0000f64ca258 [ 561.784363][ C1] x20: dfff800000000000 x19: ffff0000f64ca790 x18: ffff800011b7bf60 [ 561.785476][ C1] x17: ffff80018a421000 x16: ffff8000082d7e60 x15: 0000000000000000 [ 561.786736][ C1] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 561.787945][ C1] x11: ff008000113012b4 x10: 0000000000000000 x9 : ffff8000113012b4 [ 561.789167][ C1] x8 : ffff0000d3fb1bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 561.790455][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000113005ac [ 561.791702][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 561.792936][ C1] Call trace: [ 561.793420][ C1] __ieee80211_beacon_get+0xf60/0x12bc [ 561.794221][ C1] ieee80211_beacon_get_tim+0x70/0x44c [ 561.795047][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 561.795865][ C1] __iterate_interfaces+0x204/0x484 [ 561.796621][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 561.797663][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 561.798434][ C1] __hrtimer_run_queues+0x434/0xc34 [ 561.799164][ C1] hrtimer_run_softirq+0x160/0x400 [ 561.799865][ C1] handle_softirqs+0x318/0xc60 [ 561.800586][ C1] __do_softirq+0x14/0x20 [ 561.801221][ C1] ____do_softirq+0x14/0x20 [ 561.801889][ C1] call_on_irq_stack+0x30/0x48 [ 561.802586][ C1] do_softirq_own_stack+0x20/0x2c [ 561.803348][ C1] __irq_exit_rcu+0x23c/0x438 [ 561.804017][ C1] irq_exit_rcu+0x14/0x84 [ 561.804628][ C1] el1_interrupt+0x38/0x54 [ 561.805286][ C1] el1h_64_irq_handler+0x18/0x24 [ 561.806029][ C1] el1h_64_irq+0x64/0x68 [ 561.806640][ C1] lock_acquire+0x24c/0x63c [ 561.807273][ C1] __might_fault+0xc4/0x124 [ 561.807913][ C1] copy_msghdr_from_user+0xc0/0x4d0 [ 561.808677][ C1] do_recvmmsg+0x354/0xa0c [ 561.809283][ C1] __arm64_sys_recvmmsg+0x17c/0x23c [ 561.810030][ C1] invoke_syscall+0x98/0x2b4 [ 561.810713][ C1] el0_svc_common+0x138/0x258 [ 561.811408][ C1] do_el0_svc+0x58/0x130 [ 561.812008][ C1] el0_svc+0x58/0x128 [ 561.812600][ C1] el0t_64_sync_handler+0x84/0xf0 [ 561.813303][ C1] el0t_64_sync+0x18c/0x190 [ 561.813966][ C1] irq event stamp: 267149 [ 561.814603][ C1] hardirqs last enabled at (267148): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 561.816203][ C1] hardirqs last disabled at (267149): [] el1_dbg+0x24/0x80 [ 561.817427][ C1] softirqs last enabled at (259550): [] handle_softirqs+0xaec/0xc60 [ 561.818812][ C1] softirqs last disabled at (267145): [] __do_softirq+0x14/0x20 [ 561.820166][ C1] ---[ end trace 0000000000000000 ]---