last executing test programs: 2m40.239103706s ago: executing program 4 (id=5): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xf3}, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffffff, 0x0, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x81, 0x0, 0x3031334d, 0x0, 0x0, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}], 0x0, 0x20}}) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x45990eef4171bbac) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {0x0, 0x4000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca000000000000200000000000a4ff00", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) 2m38.525278772s ago: executing program 4 (id=11): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x401) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040)={0xfffffff9, 0x0, '\x00', {0x0, @bt={0x8, 0x9, 0x0, 0x0, 0x6, 0x0, 0x4, 0xffff7fff, 0x7fffffff, 0xfffffbff, 0x1, 0x97, 0x8, 0x84c, 0x3, 0x22, {0x8000, 0x7}, 0x43, 0x7}}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f00000024c0)}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000023c0)={0xa, @sdr={0x30314142, 0x1}}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, 0x0, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1e010100000000180000000000000084000000070000000a0101020000000018000000000000008400000007000000ac"], 0x48, 0x4}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0x0, r9, {0x4, 0x0, 0x8, 0x9}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="7472616e733d904048bb20a7d5849bbc506f426808d2642c7266646e6f3d3098a8f99478cd1a4bdd4c1e22e972cae838667634265e106f83d79ebb181c14e66b2bb6aea07f7a1b1ab995c54ba7b0cb263b2fa5aa0faa894e1a5b7b920fbd427c2c08559468438686e7724f06d35790a07b77ae230843e9e9043b2c22f6e2926243ba474838933532d46638756c51b68f221e7c7db308779b6270719db61e9617", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 2m37.401940968s ago: executing program 4 (id=18): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f00000008c0)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m36.754576648s ago: executing program 4 (id=21): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d40)={0x1, 0x0, [{0xeeee8000, 0x9e, &(0x7f0000000e00)=""/158}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0xc000000) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0xc00c5512, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0x80049370, 0x0) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/457], 0x1, 0x105df, &(0x7f00000106c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x543040, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000b, 0x11, r3, 0x0) syz_io_uring_complete(r4) 2m33.760712078s ago: executing program 4 (id=39): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) unshare(0x2000400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5413b97037a97e25f89b9e1f0e40283c60da37e803979ec384b66b0500ceba900100010087467ca62a1a21fbeea51756f67e167e", 0x34}, {&(0x7f0000000300)="07efd1afb36d1fa61eb52ea6bf87828de2eb39033de673666dd2b58bf8b95cf352f02a9d40fd992aedda0d3305f9d24524fa65f94bb1d013b9d120c1ab180a7f8230e168ec601d90ddb5ebb1fe96aed682e2f220767bbf791e5ccd119afcd130d7baca5d77905907616e2182d6bcb41dfbe93435f63e455c9a34739b7c383007f5a9ea64ea8f0ca847afec1e13362154255a4f0f03138e2ed28201212840a9450f22df39abb5d09acac70b79ac600e340533a6237e7dbad41202a073c11be583677ff048e594d58f3f3ccb174d3c00", 0xcf}], 0x2, 0x0, 0x0, 0x80094}, 0x20008808) recvfrom$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x180, 0x14, 0x14, 0x70bd28, 0x25dfdbfc, {0x5a8befb74b13e110, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "9e03be632165bdd45fde192097a4e584dbd4942c91b04a61d1a913a7a9982810"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "c8bac65ec7cfd068b6fa050e37c76dca420c7cdbfcc0d12720c5a419b14720a9fcce04301bb979515947dab31f64fc1519b384125bbe831d0a1334b7cdbe5d"}]}, 0x180}, 0x1, 0x0, 0x0, 0x14}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0xeeef0004, 0x1000, &(0x7f00000040c0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, &(0x7f0000000200)) syz_emit_ethernet(0x33, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078eeac"}}}}}}, 0x0) 2m18.741397004s ago: executing program 32 (id=39): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) unshare(0x2000400) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5413b97037a97e25f89b9e1f0e40283c60da37e803979ec384b66b0500ceba900100010087467ca62a1a21fbeea51756f67e167e", 0x34}, {&(0x7f0000000300)="07efd1afb36d1fa61eb52ea6bf87828de2eb39033de673666dd2b58bf8b95cf352f02a9d40fd992aedda0d3305f9d24524fa65f94bb1d013b9d120c1ab180a7f8230e168ec601d90ddb5ebb1fe96aed682e2f220767bbf791e5ccd119afcd130d7baca5d77905907616e2182d6bcb41dfbe93435f63e455c9a34739b7c383007f5a9ea64ea8f0ca847afec1e13362154255a4f0f03138e2ed28201212840a9450f22df39abb5d09acac70b79ac600e340533a6237e7dbad41202a073c11be583677ff048e594d58f3f3ccb174d3c00", 0xcf}], 0x2, 0x0, 0x0, 0x80094}, 0x20008808) recvfrom$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x180, 0x14, 0x14, 0x70bd28, 0x25dfdbfc, {0x5a8befb74b13e110, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "9e03be632165bdd45fde192097a4e584dbd4942c91b04a61d1a913a7a9982810"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "c8bac65ec7cfd068b6fa050e37c76dca420c7cdbfcc0d12720c5a419b14720a9fcce04301bb979515947dab31f64fc1519b384125bbe831d0a1334b7cdbe5d"}]}, 0x180}, 0x1, 0x0, 0x0, 0x14}, 0x80) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0xeeef0004, 0x1000, &(0x7f00000040c0)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, &(0x7f0000000200)) syz_emit_ethernet(0x33, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "9d0078eeac"}}}}}}, 0x0) 2m11.643911993s ago: executing program 1 (id=145): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m10.674361771s ago: executing program 1 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=@random={'user.', 'e\x7f\x90}\xee\xe7'}, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000000c0)='./file2\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800134000000000060005404e200000140003b0006173683a69702c706f72742c697000050005000a0000000500040000000000"], 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 2m8.049115781s ago: executing program 1 (id=149): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m7.085774297s ago: executing program 1 (id=153): r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000340)=ANY=[@ANYBLOB='rootdir=00000000000000000127,iocharset=utf8,anchor=0001023,adinicb,partition=00000000000000000001,shortad,iocharset=cp855,noadinicb,\x00'], 0x1, 0xc4a, &(0x7f0000001b40)="$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") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) prlimit64(r1, 0x4, 0x0, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc018}]}, 0x24}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x7, 0xffffffff, 0x2, 0x1}, 0x14) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="add773c53607344496cd32276f32c349fb7c36416df5861e8f97d9f77baa73170f1ad811d68b59cf71e14edd661d2eec898e58a3ecd7ec8b0b039b303ec8dcecb756ccdeb749ef3a32bc94231f6df1417c3d6a21e6bd07106a4081b1d63ffe95a673b2477150660a4936f7b3c23aa5bb0d9064026e14555e5a91a8b4b90a496560407cef1b93b5ce342b89b0246e80767dc547550509b9be07063e75c848773c73e005e28782cf54af8ea6336b6e678e1e31be9163532d5e4a3161f9d62eae5a683346de9b4554164cf1135cf31f7461e0cac52cf7a27fd8", 0xd8}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x8, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010300000000000000000a80000000030007000000001400010000000000000000000001"], 0xff97}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80020, &(0x7f0000000140)={[], [{@smackfsfloor}]}) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x101}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x80) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000800)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x8dd4, 0xd, 0x8000000000000001, 0x4, 0x0, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) 2m1.725479033s ago: executing program 1 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100164000ff000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000300000073797a32000000000900010073797a30000000000800054000000008740000000c0a0103f0000000000000000100000008000440000000000900010073797a300000000038000380"], 0xe4}}, 0x0) 2m0.161787605s ago: executing program 1 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ffffff80000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m59.897194531s ago: executing program 33 (id=171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ffffff80000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m42.786518429s ago: executing program 2 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=@random={'user.', 'e\x7f\x90}\xee\xe7'}, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000000c0)='./file2\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800134000000000060005404e200000140003b0006173683a69702c706f72742c697000050005000a0000000500040000000000"], 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 1m41.563304891s ago: executing program 2 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xb6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3519, 0x0, 0x50, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000304000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r1], 0x5c}, 0x1, 0xba01}, 0x0) 1m40.58658037s ago: executing program 2 (id=253): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000000c0)="9c895da54595e185128add5c1a56a1d1", 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000fe0000000800040001000000", 0x24) recvmmsg$unix(r3, &(0x7f0000000400)=[{{&(0x7f0000000380)=@abs, 0x6e, 0x0}}], 0x1, 0x40000000, 0x0) 1m39.613632063s ago: executing program 2 (id=259): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") lgetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)=@random={'user.', 'e\x7f\x90}\xee\xe7'}, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000000c0)='./file2\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a3000000000140007800800134000000000060005404e200000140003b0006173683a69702c706f72742c697000050005000a0000000500040000000000"], 0x60}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x103) 1m38.708804936s ago: executing program 2 (id=260): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat(r3, &(0x7f0000000040)='.\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0x80049363, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "dfa5ef", 0x12, 0x2f, 0x0, @empty, @mcast2, {[], {0x0, 0x6558, 0x12, 0x0, @opaque="de03245b6f26c76f0593"}}}}}}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xffffffff, @empty, 0x2}, {0xa, 0x4e23, 0x8, @remote, 0x1}, r7, 0x1}}, 0x48) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x755, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbPPSt98vKXiwIhjowULpxqa1VBCp6EGKlaLePLTbZBtKNt2S3ZQmVLSiCJ5EimdfTt78B0QR9OZR8OxJCkVKvQjCymxn4za7m2zS3Wx1Px+Y8jwzs32e787MM8/meZgJYGhNpf/kIg5GxMdJxES2PomI0XpqJOL0/f3u3b0xmy5J1Gpv/J7U90nz0fSZ1L4s83hEfP9BxJFca7mVldWFQqlUXMry09XFq9OVldWjlxcL88X54pWZk88dnzk18+ypmZ7F+uf7r1088/XLX95676dfX3/7zFNJnI792bbmOHplKqay72Q0/Qof8FKvCxuwZNAVYFvSS3PX/as8DsZE7KqnAID/snciogYADJnE/R8Ahkzj7wCNsb1+jIM9yu68GBG728U/ko3Z7a6Pg+69lzwwMpJExGQPyp+KiOtvffhNukSfxiEB2nn3ZkRcmJxqbf+SljkLW/VMF/tMrctr/2DnfJf2f0616//k1vo/sb7/k0SMt7l2t2Pz6z93uwfFdJT2/55v2/9dm7Q2uSvL/a/e5xtNLl0uFdO27f8RcThGx9P8sQ3KOPHJCz922tbc/0uXtPxGXzCrx+2R8Qc/M1eoFh4m5mZ3bkY8MdIu/mTt+Ccd+r/nuiyj+sOTX3Tatnn8/VX7POLptsf/nxltSdP8xPFomZ84XT8fphtnRav8RxMHOpU/6PjT47934/gnk+b5mpWtl/Hzp3+90mnbds//seTNenosW3e9UK0uHYsYS15tXd80hbSRb+yfxn/40MbtX7vzP/1NeKHL+Bc+++ri9uPvrzT+uS0d/60nDv3ybft4atls402P/4l66nC2ppv2r9sKPsx3BwAAAAAAAAAAAAAAAAAAAAAAAADdykXE/khy+bV0LpfP33+H92OxN1cqV6pHLpWXr8xF/V3ZkzGaazzpcqLpeah7sufhN/Iz6/LHI+JARNwa31PP52fLpblBBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmX0d3v+f+m180LUDAPpm96ArAADsOPd/ABg+27v/j/W8HgDAzvH7HwCGj/s/AAwf938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD67NzZs+lS++Pujdk0P3dtZXmhfO3oXLGykF9cns3Plpeu5ufL5flSMT9bXtzs/yuVy1dnTsby9elqsVKdrqysnl8sL1+pnr+8WJgvni+O7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA1lZXVhUKpVFySkJDYMNG4Zh6V+vQ3Mdh2CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODf4u8AAAD///zMG18=") write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r6, r5}}, 0x18) 1m38.249735086s ago: executing program 2 (id=262): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f00000008c0)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m38.12772092s ago: executing program 0 (id=263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0xb6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3519, 0x0, 0x50, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000304000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r1], 0x5c}, 0x1, 0xba01}, 0x0) 1m37.152439958s ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0x6c, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x40, 0x3, 0x4a5f73cc0a5c4ec9, 0x0, 0x7}, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) socket(0x9, 0x4, 0x7fffffff) 1m36.98571167s ago: executing program 0 (id=268): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000e0000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1m36.965569692s ago: executing program 0 (id=270): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000000000840000a1800200", @ANYRES32=r0, @ANYRES64, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r1, 0x0, 0x20000000}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x46c, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f000000ac40)={0x2020}, 0x2020) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x5843, 0x539, 0x9, 0x0, 0xffff}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={r4, 0x1e29}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x6, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x4}, @in6={0xa, 0x4e24, 0x8000, @mcast1, 0x3}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e23, 0x8c6c, @remote, 0x8179}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x88}], 0xac) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) 1m36.206704752s ago: executing program 0 (id=272): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xf3}, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffffff, 0x0, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x81, 0x0, 0x3031334d, 0x0, 0x0, [{}, {0xffffffff}, {}, {0x0, 0x76dfbff1}], 0x0, 0x20}}) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x45990eef4171bbac) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {0x0, 0x4000000000000}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) 1m35.520191027s ago: executing program 0 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x64, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000880) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x11, 0x4000d}, 0x20000000) 1m35.338920425s ago: executing program 34 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x64, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x20000880) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x11, 0x4000d}, 0x20000000) 1m23.242622514s ago: executing program 35 (id=262): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f00000008c0)=@framed={{}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}]}, &(0x7f0000000700)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.665495087s ago: executing program 5 (id=755): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x1, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x59616d61, 0x1) 5.061752548s ago: executing program 8 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0x0, 0x2}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) 4.885559328s ago: executing program 8 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) open_tree(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000340)) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 4.765759782s ago: executing program 3 (id=777): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42, 0x5c}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0xfffffff7, 0xc}, 0x10) 4.739374022s ago: executing program 3 (id=778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstat(0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x1e, 0x5, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x17f) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setresgid(0x0, 0xee00, 0xee01) io_getevents(r5, 0x3, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 3.656597508s ago: executing program 3 (id=784): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x1, 0x6, 0x0, 0x0, 0x2002) 2.651722492s ago: executing program 3 (id=787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) 2.570528027s ago: executing program 5 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000170a01080000000000000000020000040900010073797a300000002009000200"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 2.511386836s ago: executing program 7 (id=790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be00000000e22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce539f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ff0f9fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xc34) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2.355256203s ago: executing program 5 (id=791): syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc5, 0xaa, 0x6d, 0x8, 0xccd, 0x38, 0x9903, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0xdc, 0x6a}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r2, 0x401c5820, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x527) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 2.355118333s ago: executing program 7 (id=792): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 2.165274213s ago: executing program 7 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x400006}, @CTA_FILTER={0x4}, @CTA_STATUS={0x8}]}, 0x38}}, 0x0) write$nbd(r4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xd6) 1.81260475s ago: executing program 6 (id=797): socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000740)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00031300000013ef20"], 0x0, 0x0, 0x0}, 0x0) 1.642435151s ago: executing program 3 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c0007800500140080ff22000500010006000000050005000200000005000400000000000900020073797a320006000011000300686173683a69702c706f727400"], 0x58}}, 0x0) 1.553488832s ago: executing program 3 (id=799): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c4}, 0x0) 1.287591738s ago: executing program 5 (id=800): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x80000001, 0x4) 1.237813146s ago: executing program 7 (id=801): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) io_setup(0x883, &(0x7f0000000380)=0x0) io_submit(r1, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000340), 0xfdef}]) 1.232480494s ago: executing program 6 (id=802): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2600000004"], 0x20) 1.084501653s ago: executing program 6 (id=803): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x7, 0x3ae2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000003000000ff02"], 0x28}, 0x24044010) 992.938284ms ago: executing program 8 (id=804): unshare(0x22020600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 960.763836ms ago: executing program 7 (id=805): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) 912.071148ms ago: executing program 6 (id=806): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x28000400) r0 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x88, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 786.519787ms ago: executing program 8 (id=807): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/fdt', 0x0, 0x0) unshare(0x22020600) mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000001dc0)={0x8c, 0x70, 0x40000, {r0}}, 0x20) 710.867255ms ago: executing program 8 (id=808): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/firmware/fdt', 0x0, 0x0) openat(r0, &(0x7f0000000640)='./file0\x00', 0x40, 0x0) 645.601508ms ago: executing program 5 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}], 0x18}}], 0x1, 0x0) 536.303833ms ago: executing program 8 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x442, 0x1080}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x16, 0x1, 0xffffffffffffffff, @void, @value}, 0x20) 491.265266ms ago: executing program 5 (id=811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 308.598955ms ago: executing program 7 (id=812): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa14001980"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x40}}, 0x0) 102.908761ms ago: executing program 6 (id=813): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x26e69, 0xf, 0x0, 0x325}, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xeb, 0x0, 0xffd, 0x3a}, 0x1c) 0s ago: executing program 6 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) kernel console output (not intermixed with test programs): RFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.185980][ T6428] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 85.188381][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.331354][ T7319] loop2: detected capacity change from 0 to 1024 [ 85.352509][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.611740][ T7322] loop3: detected capacity change from 0 to 32768 [ 85.643628][ T5985] Bluetooth: hci0: command tx timeout [ 85.647264][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.658147][ T7248] chnl_net:caif_netlink_parms(): no params data found [ 85.784092][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.193'. [ 85.826624][ T7349] batadv1: entered allmulticast mode [ 85.847870][ T7322] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.421658][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.445716][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.457084][ T7248] bridge_slave_0: entered allmulticast mode [ 86.466171][ T7322] XFS (loop3): Ending clean mount [ 86.490218][ T7248] bridge_slave_0: entered promiscuous mode [ 86.507327][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.542831][ T7366] loop5: detected capacity change from 0 to 2048 [ 86.565935][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.567781][ T7248] bridge_slave_1: entered allmulticast mode [ 86.569657][ T7248] bridge_slave_1: entered promiscuous mode [ 86.574799][ T44] bridge_slave_1: left allmulticast mode [ 86.576001][ T44] bridge_slave_1: left promiscuous mode [ 86.581042][ T6428] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.583546][ T7366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.606678][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.621336][ T7366] fuse: Unknown parameter 'fãMÍ –ožyqÇß[ì_m0x0000000000000005' [ 86.747300][ T44] bridge_slave_0: left allmulticast mode [ 86.748703][ T44] bridge_slave_0: left promiscuous mode [ 86.754974][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.700180][ T5985] Bluetooth: hci0: command tx timeout [ 88.360012][ T7399] loop2: detected capacity change from 0 to 1024 [ 88.411619][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 88.461646][ T7369] loop0: detected capacity change from 0 to 65536 [ 88.487548][ T44] xfrm0 (unregistering): left allmulticast mode [ 88.511339][ T7369] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 88.540993][ T7369] XFS (loop0): Ending clean mount [ 88.595907][ T6432] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 88.741571][ T7411] loop2: detected capacity change from 0 to 32768 [ 88.751021][ T7411] XFS: ikeep mount option is deprecated. [ 88.752276][ T7411] XFS: noikeep mount option is deprecated. [ 88.769939][ T7411] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 88.820848][ T7411] XFS (loop2): Ending clean mount [ 88.833058][ T7411] XFS (loop2): Quotacheck needed: Please wait. [ 88.853685][ T7411] XFS (loop2): Quotacheck: Done. [ 88.934071][ T6422] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 89.122660][ T7430] loop2: detected capacity change from 0 to 1024 [ 89.326455][ T7430] loop2: detected capacity change from 0 to 32768 [ 89.356916][ T7430] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.417206][ T7430] XFS (loop2): Ending clean mount [ 89.527134][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.589088][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.629654][ T44] bond0 (unregistering): Released all slaves [ 89.689123][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 89.751767][ T7426] netlink: 80 bytes leftover after parsing attributes in process `syz.0.209'. [ 89.754101][ T7426] netlink: 80 bytes leftover after parsing attributes in process `syz.0.209'. [ 89.792245][ T5985] Bluetooth: hci0: command tx timeout [ 89.853370][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.856711][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.917554][ T7449] loop0: detected capacity change from 0 to 1024 [ 89.963176][ T7449] hfsplus: failed to load root directory [ 91.139941][ T6422] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.297226][ T7463] binder: 7462:7463 got reply transaction with no transaction stack [ 91.299870][ T7463] binder: 7462:7463 transaction reply to 0:0 failed 3/29201/-71, size 0-252 line 3052 [ 91.302745][ T7463] binder: 7462:7463 ioctl c0306201 0 returned -14 [ 91.327569][ T6480] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.398981][ T7248] team0: Port device team_slave_0 added [ 91.409064][ T7248] team0: Port device team_slave_1 added [ 91.519135][ T7471] loop2: detected capacity change from 0 to 4096 [ 91.521695][ T7471] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 91.876924][ T5985] Bluetooth: hci0: command tx timeout [ 92.042341][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.072610][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.117053][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.123026][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.127247][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.245666][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.033789][ T7488] loop5: detected capacity change from 0 to 1024 [ 93.041067][ T7488] hfsplus: unable to find HFS+ superblock [ 93.081385][ T44] hsr_slave_0: left promiscuous mode [ 93.250730][ T44] hsr_slave_1: left promiscuous mode [ 93.283868][ T7499] loop0: detected capacity change from 0 to 16 [ 93.289190][ T7499] erofs: Unknown parameter '' [ 93.579561][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.590372][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.730519][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.733815][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.892720][ T44] veth1_macvtap: left promiscuous mode [ 93.893886][ T44] veth0_macvtap: left promiscuous mode [ 93.900211][ T44] veth1_vlan: left promiscuous mode [ 93.903511][ T44] veth0_vlan: left promiscuous mode [ 93.916702][ T7503] netlink: 'syz.0.234': attribute type 32 has an invalid length. [ 93.919033][ T7503] netlink: 88 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.338821][ T7509] loop3: detected capacity change from 0 to 16 [ 94.353114][ T7509] erofs (device loop3): mounted with root inode @ nid 36. [ 94.375479][ T7509] overlay: ./file2 is not a directory [ 94.871665][ T7505] loop0: detected capacity change from 0 to 40427 [ 95.206094][ T7505] loop0: detected capacity change from 0 to 32768 [ 95.208006][ T7505] XFS: attr2 mount option is deprecated. [ 95.209293][ T7505] XFS: ikeep mount option is deprecated. [ 95.210564][ T7505] XFS: noikeep mount option is deprecated. [ 95.253821][ T7505] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 95.307627][ T7505] XFS (loop0): Ending clean mount [ 95.310935][ T7505] XFS (loop0): Quotacheck needed: Please wait. [ 95.349804][ T7505] XFS (loop0): Quotacheck: Done. [ 95.411381][ T7513] loop3: detected capacity change from 0 to 40427 [ 95.424570][ T7513] F2FS-fs (loop3): invalid crc value [ 95.441114][ T7513] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.461827][ T7513] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.581454][ T6428] syz-executor: attempt to access beyond end of device [ 95.581454][ T6428] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.585872][ T6428] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 95.627416][ T6432] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 96.360724][ T44] team0 (unregistering): Port device team_slave_1 removed [ 96.552412][ T44] team0 (unregistering): Port device team_slave_0 removed [ 98.806201][ T7248] hsr_slave_0: entered promiscuous mode [ 98.819313][ T7547] loop0: detected capacity change from 0 to 8 [ 98.828069][ T7546] loop3: detected capacity change from 0 to 128 [ 98.847876][ T7546] gfs2: gfs2 mount does not exist [ 98.898656][ T7248] hsr_slave_1: entered promiscuous mode [ 99.043143][ T7248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.044830][ T7248] Cannot create hsr debugfs directory [ 99.184927][ T7565] loop2: detected capacity change from 0 to 16 [ 99.434376][ T7565] erofs (device loop2): mounted with root inode @ nid 36. [ 99.463420][ T7565] overlay: ./file2 is not a directory [ 100.324238][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.250'. [ 101.080417][ T7568] loop5: detected capacity change from 0 to 32768 [ 101.276472][ T7248] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.284084][ T7248] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.294825][ T7568] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 101.315138][ T7248] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.332470][ T7595] loop0: detected capacity change from 0 to 4096 [ 101.339715][ T7248] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.444920][ T7595] loop0: detected capacity change from 0 to 1024 [ 101.485960][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.518071][ T7248] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.536026][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.537530][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.559271][ T7097] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.560812][ T7097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.581135][ T6933] ocfs2: Unmounting device (7,5) on (node local) [ 101.634868][ T7248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.993631][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.318800][ T7631] loop2: detected capacity change from 0 to 16 [ 102.357777][ T7631] erofs (device loop2): mounted with root inode @ nid 36. [ 102.379057][ T7631] overlay: ./file2 is not a directory [ 102.889489][ T7607] loop0: detected capacity change from 0 to 32768 [ 102.906495][ T7607] (syz.0.257,7607,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "atime_quantum=00000000002147483649" or missing value [ 102.936414][ T7607] (syz.0.257,7607,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 103.128594][ T7248] veth0_vlan: entered promiscuous mode [ 103.146460][ T7248] veth1_vlan: entered promiscuous mode [ 103.171114][ T7641] loop2: detected capacity change from 0 to 2048 [ 103.172748][ T7641] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.174056][ T7641] EXT4-fs: Ignoring removed i_version option [ 103.206195][ T7248] veth0_macvtap: entered promiscuous mode [ 103.239433][ T7248] veth1_macvtap: entered promiscuous mode [ 103.271559][ T7641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.282232][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.287338][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.289392][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.291470][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.293456][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.295491][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.344688][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.346799][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.350195][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.355491][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.359037][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.377056][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.379079][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.381171][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.383413][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.385399][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.396989][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.400147][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.403720][ T7248] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.405689][ T7248] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.427053][ T7248] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.428803][ T7248] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.454312][ T7605] loop3: detected capacity change from 0 to 131072 [ 103.489184][ T7605] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.502306][ T6422] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.509024][ T7605] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.699048][ T7097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.700927][ T7097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.711184][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.712865][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.803124][ T7662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.263'. [ 103.860637][ T7666] loop6: detected capacity change from 0 to 256 [ 104.059471][ T7674] loop6: detected capacity change from 0 to 1024 [ 104.204028][ T7616] loop5: detected capacity change from 0 to 131072 [ 104.218998][ T7616] F2FS-fs (loop5): invalid crc value [ 104.234603][ T7616] F2FS-fs (loop5): Found nat_bits in checkpoint [ 104.301613][ T7616] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 104.583337][ T7688] tipc: Started in network mode [ 104.584438][ T7688] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 104.586269][ T7688] tipc: Enabled bearer , priority 10 [ 104.706158][ T7697] loop0: detected capacity change from 0 to 512 [ 104.762037][ T7697] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.781903][ T7697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c119, mo2=0002] [ 104.783710][ T7697] System zones: 1-12 [ 104.791144][ T7697] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.270: corrupted in-inode xattr: e_value size too large [ 104.802696][ T7697] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.270: couldn't read orphan inode 15 (err -117) [ 104.812247][ T7697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.931642][ T7703] loop6: detected capacity change from 0 to 16 [ 104.960108][ T7703] erofs (device loop6): mounted with root inode @ nid 36. [ 104.977577][ T7703] overlay: ./file2 is not a directory [ 105.602553][ T6733] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.618129][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.273'. [ 105.725514][ T6480] tipc: Node number set to 15444650 [ 105.841058][ T7721] loop5: detected capacity change from 0 to 2048 [ 105.842852][ T7721] udf: Bad value for 'session' [ 106.059987][ T7728] netlink: 36 bytes leftover after parsing attributes in process `syz.6.277'. [ 106.367101][ T7751] loop3: detected capacity change from 0 to 256 [ 106.416684][ T7751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 106.419523][ T7751] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.450353][ T7751] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 106.486697][ T6425] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.491913][ T6425] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.494406][ T6425] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.498559][ T6425] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.500612][ T6425] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.502383][ T6425] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.878508][ T7755] chnl_net:caif_netlink_parms(): no params data found [ 106.969927][ T7779] loop3: detected capacity change from 0 to 16 [ 107.041577][ T7779] erofs (device loop3): mounted with root inode @ nid 36. [ 107.062707][ T7779] overlay: ./file2 is not a directory [ 107.210417][ T7777] loop6: detected capacity change from 0 to 512 [ 107.605445][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.285'. [ 107.640671][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.642258][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.643701][ T7755] bridge_slave_0: entered allmulticast mode [ 107.645529][ T7755] bridge_slave_0: entered promiscuous mode [ 107.674625][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.687671][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.689281][ T7755] bridge_slave_1: entered allmulticast mode [ 107.691101][ T7755] bridge_slave_1: entered promiscuous mode [ 107.952150][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.969072][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.978764][ T7732] loop5: detected capacity change from 0 to 131072 [ 107.989845][ T7732] F2FS-fs (loop5): invalid crc value [ 108.008507][ T7732] F2FS-fs (loop5): Found nat_bits in checkpoint [ 108.078569][ T7732] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 108.092469][ T7755] team0: Port device team_slave_0 added [ 108.097343][ T7755] team0: Port device team_slave_1 added [ 108.189245][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.190832][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.216482][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.300171][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.301624][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.306758][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.340664][ T7802] loop3: detected capacity change from 0 to 32768 [ 108.420200][ T7755] hsr_slave_0: entered promiscuous mode [ 108.500133][ T7755] hsr_slave_1: entered promiscuous mode [ 108.629450][ T7755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.631225][ T7755] Cannot create hsr debugfs directory [ 108.639447][ T5985] Bluetooth: hci2: command tx timeout [ 108.762820][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 108.860192][ T7755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.881990][ T7755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.900728][ T7755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.908153][ T7755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.945508][ T7755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.952767][ T7755] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.981965][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.983375][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.985695][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.987245][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.086118][ T7755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.160397][ T7827] loop6: detected capacity change from 0 to 32768 [ 109.258219][ T7860] loop5: detected capacity change from 0 to 16 [ 109.273381][ T7860] erofs (device loop5): mounted with root inode @ nid 36. [ 109.287092][ T7860] overlay: ./file2 is not a directory [ 109.893740][ T7827] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 109.906951][ T7827] bcachefs (loop6): initializing new filesystem [ 109.914926][ T7827] bcachefs (loop6): going read-write [ 110.007989][ T7827] bcachefs (loop6): marking superblocks [ 110.032076][ T7827] bcachefs (loop6): initializing freespace [ 110.062484][ T7755] veth0_vlan: entered promiscuous mode [ 110.066346][ T7755] veth1_vlan: entered promiscuous mode [ 110.077060][ T7827] bcachefs (loop6): done initializing freespace [ 110.081987][ T7827] bcachefs (loop6): reading snapshots table [ 110.083251][ T7827] bcachefs (loop6): reading snapshots done [ 110.128000][ T7827] bcachefs (loop6): done starting filesystem [ 110.192528][ T7755] veth0_macvtap: entered promiscuous mode [ 110.195434][ T7755] veth1_macvtap: entered promiscuous mode [ 110.221723][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.224013][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.225942][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.259850][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.261838][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.277335][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.279308][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.281383][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.283341][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.291847][ T7880] loop3: detected capacity change from 0 to 4096 [ 110.306895][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.309374][ T7880] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 110.310621][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.315106][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.326900][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.329389][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.329667][ T7248] bcachefs (loop6): shutting down [ 110.331607][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.331622][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.331633][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.331656][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.336951][ T7248] bcachefs (loop6): going read-only [ 110.342196][ T7248] bcachefs (loop6): finished waiting for writes to stop [ 110.349479][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.351514][ T7755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.353525][ T7755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.356036][ T7755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.365699][ T7755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.371566][ T7755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.404828][ T7755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.406611][ T7755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.438376][ T7248] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 110.453733][ T7248] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 5 [ 110.473401][ T7248] bcachefs (loop6): shutdown complete, journal seq 6 [ 110.475415][ T7248] bcachefs (loop6): marking filesystem clean [ 110.529582][ T7248] bcachefs (loop6): shutdown complete [ 110.553388][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.555138][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.574524][ T7872] loop5: detected capacity change from 0 to 32768 [ 110.589210][ T7872] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 110.589210][ T7872] clean (size 2912): [ 110.589210][ T7872] flags: 0 [ 110.589210][ T7872] journal_seq: 10 [ 110.589210][ T7872] usage: type=inodes v=8 [ 110.589210][ T7872] usage: type=key_version v=2 [ 110.589210][ T7872] usage: type=reserved v=0 [ 110.589210][ T7872] usage: type=reserved v=0 [ 110.589210][ T7872] usage: type=reserved v=0 [ 110.589210][ T7872] usage: type=reserved v=0 [ 110.589210][ T7872] data_usage: btree: 1/1 [0]=2816 [ 110.589210][ T7872] data_usage: journal: 1/1 [0]=0 [ 110.589210][ T7872] data_usage: user: 1/1 [0]=32 [ 110.589210][ T7872] dev_usage: dev=0 [ 110.589210][ T7872] free: buckets=83 sectors=0 fragmented=0 [ 110.589210][ T7872] sb: buckets=25 sectors=6152 fragmented=248 [ 110.589210][ T7872] journal: buckets=8 sectors=2048 fragmented=0 [ 110.589210][ T7872] btree: buckets=11 sectors=2816 fragmented=0 [ 110.589210][ T7872] user: buckets=1 sectors=32 fragmented=224 [ 110.589210][ T7872] cached: buckets=0 sectors=0 fragmented=0 [ 110.589210][ T7872] parity: buckets=0 sectors=0 fragmented=0 [ 110.589210][ T7872] stripe: buckets=0 sectors=0 fragmented=0 [ 110.589210][ T7872] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 110.589210][ T7872] need_discard: buckets=0 sectors=0 fragmented=0 [ 110.589210][ T7872] clock: read=0 [ 110.589210][ T7872] clock: write=1336 [ 110.589210][ T7872] btree_root: btree=extents l=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 83426f [ 110.589377][ T7872] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 110.620170][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.641726][ T7894] loop3: detected capacity change from 0 to 4096 [ 110.652484][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.653965][ T7894] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 110.655978][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.667273][ T6425] Bluetooth: hci2: command tx timeout [ 110.710156][ T7894] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 110.762371][ T7894] ntfs3(loop3): ino=1e, "file1" failed to parse mft record [ 110.764032][ T7894] ntfs3(loop3): ino=1e, "file1" attr_set_size [ 110.820834][ T7900] loop7: detected capacity change from 0 to 4096 [ 110.850089][ T7900] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 111.154019][ T7872] loop5: detected capacity change from 0 to 32768 [ 111.299276][ T7872] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.025830][ T7872] XFS (loop5): Ending clean mount [ 112.205731][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.296'. [ 112.448677][ T7911] loop3: detected capacity change from 0 to 131072 [ 112.466908][ T7911] F2FS-fs (loop3): invalid crc value [ 112.517715][ T7911] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.544404][ T6933] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.573910][ T7911] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 112.846698][ T6425] Bluetooth: hci2: command tx timeout [ 113.511854][ T7951] loop7: detected capacity change from 0 to 32768 [ 113.513587][ T7951] btrfs: Deprecated parameter 'usebackuproot' [ 113.514959][ T7951] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 113.517816][ T7951] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.304 (7951) [ 113.544773][ T7951] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.553279][ T7951] BTRFS info (device loop7): using crc32c (crc32c-arm64) checksum algorithm [ 113.566916][ T7951] BTRFS info (device loop7): disk space caching is enabled [ 113.568473][ T7951] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 113.745245][ T7133] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0 [ 113.754879][ T7951] BTRFS warning (device loop7): couldn't read tree root [ 113.764879][ T7951] BTRFS warning (device loop7): try to load backup roots slot 1 [ 113.766800][ T7133] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0 [ 113.781395][ T7951] BTRFS warning (device loop7): couldn't read tree root [ 113.782886][ T7951] BTRFS warning (device loop7): try to load backup roots slot 2 [ 113.788011][ T38] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 113.794538][ T7951] BTRFS warning (device loop7): couldn't read tree root [ 113.796201][ T7951] BTRFS warning (device loop7): try to load backup roots slot 3 [ 114.440145][ T7951] BTRFS info (device loop7): rebuilding free space tree [ 114.473483][ T7951] BTRFS info (device loop7): disabling free space tree [ 114.474951][ T7951] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.490134][ T7951] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.631399][ T7951] cgroup: fork rejected by pids controller in /syz7 [ 114.647943][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.298'. [ 114.675945][ T8011] netlink: 'syz.6.309': attribute type 32 has an invalid length. [ 114.677959][ T8011] netlink: 88 bytes leftover after parsing attributes in process `syz.6.309'. [ 114.818135][ T7755] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.861478][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'. [ 114.889487][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 114.892234][ T8038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.906018][ T5985] Bluetooth: hci2: command tx timeout [ 115.053265][ T8045] loop3: detected capacity change from 0 to 8192 [ 115.107952][ T8045] process 'syz.3.315' launched './file2' with NULL argv: empty string added [ 115.110743][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.112764][ T8045] FAT-fs (loop3): Filesystem has been set read-only [ 115.126287][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.128827][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.130673][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.132489][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.134316][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.136173][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.153840][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.160504][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.164915][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.170058][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.174104][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.177215][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.184236][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.186054][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.189990][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.194441][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.199556][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.202178][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.204182][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.213795][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.215682][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.221591][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.229955][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.235905][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.240690][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.246037][ T8045] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 115.277575][ T8042] loop5: detected capacity change from 0 to 40427 [ 115.286795][ T8042] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 115.288280][ T8042] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 115.334688][ T8042] F2FS-fs (loop5): Found nat_bits in checkpoint [ 115.368526][ T8042] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 115.372418][ T8042] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 115.539402][ T8054] loop3: detected capacity change from 0 to 8192 [ 115.575060][ T8027] delete_channel: no stack [ 115.609845][ T8029] block nbd6: shutting down sockets [ 115.722919][ T8066] loop3: detected capacity change from 0 to 4096 [ 115.745020][ T38] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.754891][ T5985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.758741][ T5985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.761116][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.766283][ T5985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.773858][ T5985] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.776181][ T5985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.785310][ T8066] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 115.823065][ T8066] ntfs3(loop3): Failed to load $Bitmap (-2). [ 115.981180][ T38] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.697509][ T8042] F2FS-fs (loop5): Unrecognized mount option "nous_ ævkp:ýer_xattr" or missing value [ 116.729270][ T38] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.869582][ T38] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.908249][ T8066] loop3: detected capacity change from 0 to 32768 [ 117.103806][ T8087] loop5: detected capacity change from 0 to 32768 [ 117.130557][ T8087] [ 117.130557][ T8087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.130557][ T8087] [ 117.149862][ T8087] [ 117.149862][ T8087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.149862][ T8087] [ 117.152286][ T8087] [ 117.152286][ T8087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.152286][ T8087] [ 117.154507][ T8087] [ 117.154507][ T8087] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.154507][ T8087] [ 117.184198][ T100] [ 117.184198][ T100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.184198][ T100] [ 117.204527][ T6933] [ 117.204527][ T6933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.204527][ T6933] [ 117.213427][ T6933] [ 117.213427][ T6933] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 117.213427][ T6933] [ 117.215690][ T8068] chnl_net:caif_netlink_parms(): no params data found [ 117.226473][ T8066] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 117.253059][ T8066] bcachefs (loop3): initializing new filesystem [ 117.256627][ T8066] bcachefs (loop3): going read-write [ 117.294200][ T8066] bcachefs (loop3): marking superblocks [ 117.305939][ T8066] bcachefs (loop3): initializing freespace [ 117.308469][ T8066] bcachefs (loop3): done initializing freespace [ 117.311797][ T8066] bcachefs (loop3): reading snapshots table [ 117.313235][ T8066] bcachefs (loop3): reading snapshots done [ 117.357591][ T8066] bcachefs (loop3): done starting filesystem [ 117.937716][ T6425] Bluetooth: hci2: command tx timeout [ 118.044839][ T8107] xfrm0: entered allmulticast mode [ 118.115719][ T8117] loop6: detected capacity change from 0 to 4096 [ 118.125091][ T8117] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 118.272722][ T6428] bcachefs (loop3): shutting down [ 118.273893][ T6428] bcachefs (loop3): going read-only [ 118.278734][ T6428] bcachefs (loop3): finished waiting for writes to stop [ 118.287092][ T8068] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.288556][ T8068] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.291066][ T8068] bridge_slave_0: entered allmulticast mode [ 118.292788][ T8068] bridge_slave_0: entered promiscuous mode [ 118.295111][ T8068] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.296632][ T8068] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.298341][ T8068] bridge_slave_1: entered allmulticast mode [ 118.300173][ T8068] bridge_slave_1: entered promiscuous mode [ 118.368487][ T6428] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 118.414190][ T6428] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 6 [ 118.538658][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.324'. [ 118.540654][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.6.324'. [ 118.542388][ T8117] netlink: 'syz.6.324': attribute type 12 has an invalid length. [ 118.558736][ T38] bridge_slave_1: left allmulticast mode [ 118.560000][ T38] bridge_slave_1: left promiscuous mode [ 118.561371][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.564288][ T6428] bcachefs (loop3): shutdown complete, journal seq 7 [ 118.566316][ T6428] bcachefs (loop3): marking filesystem clean [ 118.609240][ T6428] bcachefs (loop3): shutdown complete [ 118.611802][ T6430] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.613904][ T38] bridge_slave_0: left allmulticast mode [ 118.615144][ T38] bridge_slave_0: left promiscuous mode [ 118.615856][ T6430] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.617064][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.619120][ T6430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.621850][ T6430] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.623561][ T6430] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.625351][ T6430] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.780809][ T8143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.330'. [ 119.829891][ T8147] loop3: detected capacity change from 0 to 1024 [ 120.017485][ T5985] Bluetooth: hci2: command tx timeout [ 120.230629][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.277982][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.318561][ T38] bond0 (unregistering): Released all slaves [ 120.327323][ T8068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.331125][ T8068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.341082][ T8141] tipc: Started in network mode [ 120.342146][ T8141] tipc: Node identity fe8000000000000000bf7998a2c651b, cluster identity 4711 [ 120.343971][ T8141] tipc: Enabling of bearer rejected, failed to enable media [ 120.483589][ T8153] loop3: detected capacity change from 0 to 4096 [ 120.542384][ T8068] team0: Port device team_slave_0 added [ 120.563824][ T8068] team0: Port device team_slave_1 added [ 120.657079][ T5985] Bluetooth: hci4: command tx timeout [ 120.873824][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.875462][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.882850][ T8068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.972649][ T8169] loop5: detected capacity change from 0 to 8 [ 120.988406][ T8169] squashfs image failed sanity check [ 121.012461][ T8169] (syz.5.337,8169,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "grpquota(" or missing value [ 121.025075][ T8169] (syz.5.337,8169,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 121.054937][ T8068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.060990][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.333'. [ 121.065780][ T8068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.157054][ T8068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.469087][ T8068] hsr_slave_0: entered promiscuous mode [ 121.532272][ T8068] hsr_slave_1: entered promiscuous mode [ 121.638606][ T8068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.660751][ T8068] Cannot create hsr debugfs directory [ 121.928216][ T8186] loop5: detected capacity change from 0 to 8192 [ 122.032449][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.035372][ T8186] FAT-fs (loop5): Filesystem has been set read-only [ 122.041695][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.043543][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.046575][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.055845][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.058377][ T38] hsr_slave_0: left promiscuous mode [ 122.065205][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.076956][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.081639][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.084614][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.091820][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.096711][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.099529][ T5985] Bluetooth: hci2: command tx timeout [ 122.108455][ T38] hsr_slave_1: left promiscuous mode [ 122.127429][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.130265][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.133994][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.151083][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.156219][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.166703][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.171862][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.173801][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.175720][ T8186] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 122.187212][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.190238][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.202801][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.204353][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.226061][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.341'. [ 122.254087][ T38] veth1_macvtap: left promiscuous mode [ 122.255485][ T38] veth0_macvtap: left promiscuous mode [ 122.256556][ T38] veth1_vlan: left promiscuous mode [ 122.283484][ T38] veth0_vlan: left promiscuous mode [ 122.737943][ T5985] Bluetooth: hci4: command tx timeout [ 124.072086][ T38] team0 (unregistering): Port device team_slave_1 removed [ 124.177006][ T5985] Bluetooth: hci2: command tx timeout [ 124.250469][ T38] team0 (unregistering): Port device team_slave_0 removed [ 124.819377][ T5985] Bluetooth: hci4: command tx timeout [ 125.942600][ T2350] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944041][ T2350] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.375889][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.341'. [ 126.377984][ T8195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.404750][ T8197] bond0: option arp_interval: invalid value (18446744073709551615) [ 126.406351][ T8197] bond0: option arp_interval: allowed values 0 - 2147483647 [ 126.619101][ T8209] loop5: detected capacity change from 0 to 32768 [ 126.621483][ T8209] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 [] [ 126.621483][ T8209] replicas_v0 (size 24): [ 126.621483][ T8209] btree: 0 [] (unknown data_type 128): 2 [1 0] user: 1 [0] [ 126.621483][ T8209] [ 126.627097][ T8209] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 126.658510][ T8137] chnl_net:caif_netlink_parms(): no params data found [ 127.133304][ T5985] Bluetooth: hci4: command tx timeout [ 127.415830][ T8227] loop3: detected capacity change from 0 to 1024 [ 127.449004][ T8226] netlink: 'syz.6.349': attribute type 29 has an invalid length. [ 127.451229][ T8228] netlink: 'syz.6.349': attribute type 29 has an invalid length. [ 127.833995][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.835595][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.845041][ T8137] bridge_slave_0: entered allmulticast mode [ 127.867093][ T8137] bridge_slave_0: entered promiscuous mode [ 128.577271][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.578937][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.580662][ T8137] bridge_slave_1: entered allmulticast mode [ 128.582536][ T8137] bridge_slave_1: entered promiscuous mode [ 128.594592][ T8223] loop5: detected capacity change from 0 to 32768 [ 128.618995][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.622628][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.049059][ T8137] team0: Port device team_slave_0 added [ 129.063547][ T8137] team0: Port device team_slave_1 added [ 129.153472][ T8266] netlink: 32 bytes leftover after parsing attributes in process `syz.5.356'. [ 129.155309][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.356'. [ 129.788219][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.790529][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.796663][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.535462][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.537368][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.544191][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.900978][ T8298] loop6: detected capacity change from 0 to 32768 [ 130.906041][ T8298] btrfs: Deprecated parameter 'usebackuproot' [ 130.907542][ T8298] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 130.927846][ T8298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.363 (8298) [ 130.945321][ T8298] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.950823][ T8298] BTRFS info (device loop6): using crc32c (crc32c-arm64) checksum algorithm [ 130.956276][ T8298] BTRFS info (device loop6): using free-space-tree [ 130.962380][ T38] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.140982][ T8137] hsr_slave_0: entered promiscuous mode [ 131.151607][ T1768] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 131.155255][ T8298] BTRFS warning (device loop6): couldn't read tree root [ 131.172765][ T8298] BTRFS warning (device loop6): try to load backup roots slot 1 [ 131.177771][ T8137] hsr_slave_1: entered promiscuous mode [ 131.183765][ T7095] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 131.186570][ T8298] BTRFS warning (device loop6): couldn't read tree root [ 131.188653][ T8298] BTRFS warning (device loop6): try to load backup roots slot 2 [ 131.247375][ T8137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.249246][ T8137] Cannot create hsr debugfs directory [ 131.287044][ T7095] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 131.300156][ T8298] BTRFS warning (device loop6): couldn't read tree root [ 131.301623][ T8298] BTRFS warning (device loop6): try to load backup roots slot 3 [ 131.327956][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.366'. [ 131.334098][ T8298] BTRFS info (device loop6): rebuilding free space tree [ 131.342120][ T8298] BTRFS info (device loop6): checking UUID tree [ 131.400639][ T38] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.429177][ T7248] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.500794][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.366'. [ 131.502719][ T8328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.631357][ T8342] binder: 8341:8342 context manager tried to acquire desc 0 [ 131.633033][ T8342] binder: 8341:8342 ioctl c0306201 20000240 returned -22 [ 131.708497][ T38] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.818295][ T8068] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.987975][ T38] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.071369][ T8068] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 132.098786][ T8068] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 132.144879][ T8068] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 132.751084][ T8342] loop5: detected capacity change from 0 to 32768 [ 132.753803][ T8342] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.370 (8342) [ 132.781264][ T8345] loop6: detected capacity change from 0 to 32768 [ 132.792099][ T8345] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.367 (8345) [ 132.814951][ T8342] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 132.818331][ T8342] BTRFS info (device loop5): using crc32c (crc32c-arm64) checksum algorithm [ 132.820152][ T8342] BTRFS info (device loop5): using free-space-tree [ 132.836332][ T8345] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 132.838682][ T8345] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 132.913410][ T38] bridge_slave_1: left allmulticast mode [ 132.914539][ T38] bridge_slave_1: left promiscuous mode [ 132.915756][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.920261][ T38] bridge_slave_0: left allmulticast mode [ 132.921714][ T38] bridge_slave_0: left promiscuous mode [ 132.933241][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.103805][ T8345] BTRFS info (device loop6): rebuilding free space tree [ 133.133221][ T8342] BTRFS error (device loop5): balance: invalid convert data profile single [ 133.142409][ T8345] BTRFS info (device loop6): disabling free space tree [ 133.143831][ T8345] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 133.145923][ T8345] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 133.230635][ T8402] loop3: detected capacity change from 0 to 16 [ 133.285481][ T8402] erofs (device loop3): mounted with root inode @ nid 36. [ 133.338051][ T8402] overlay: ./file2 is not a directory [ 133.750224][ T6933] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.898251][ T7248] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 133.930595][ T8406] loop3: detected capacity change from 0 to 1024 [ 134.096639][ T38] xfrm0 (unregistering): left allmulticast mode [ 134.143629][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.378'. [ 136.035988][ T8426] netlink: 32 bytes leftover after parsing attributes in process `syz.6.381'. [ 136.040786][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.6.381'. [ 136.141613][ T8429] loop6: detected capacity change from 0 to 8192 [ 137.132213][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.184916][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.228803][ T38] bond0 (unregistering): Released all slaves [ 137.242045][ T38] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 137.278879][ T38] batadv1: left promiscuous mode [ 137.281616][ T38] bond1 (unregistering): Released all slaves [ 137.388081][ T8137] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 137.428022][ T8137] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 137.539071][ T8068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.551529][ T8137] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 137.559123][ T8137] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 137.683403][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.708370][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 137.709986][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.714832][ T8068] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.807875][ T8459] bridge_slave_1: left allmulticast mode [ 137.809046][ T8459] bridge_slave_1: left promiscuous mode [ 137.811994][ T8459] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.836778][ T8459] bridge_slave_0: left allmulticast mode [ 137.838682][ T8459] bridge_slave_0: left promiscuous mode [ 137.840016][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.875034][ T8437] loop6: detected capacity change from 0 to 40427 [ 137.879802][ T8437] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 137.882337][ T8437] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 137.944948][ T8458] batadv0: entered promiscuous mode [ 137.946053][ T8458] batadv0: entered allmulticast mode [ 137.948759][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 137.957446][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 137.962610][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 137.972890][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.974462][ T7095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.976352][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.984440][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 137.997832][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.006018][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.011130][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.135585][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.140319][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.142401][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.149944][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.159756][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.186506][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.187971][ T8078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.245145][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 138.248250][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.258288][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.262189][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.270483][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.287496][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.301388][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.303385][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.306651][ T8458] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 138.401580][ T8485] loop6: detected capacity change from 0 to 1024 [ 138.516536][ T8068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.535165][ T8458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 138.595323][ T38] hsr_slave_0: left promiscuous mode [ 138.644199][ T38] hsr_slave_1: left promiscuous mode [ 138.740228][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.741952][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.748111][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.749552][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.774504][ T38] veth1_macvtap: left promiscuous mode [ 138.780444][ T38] veth0_macvtap: left promiscuous mode [ 138.782820][ T38] veth1_vlan: left promiscuous mode [ 138.787489][ T38] veth0_vlan: left promiscuous mode [ 139.091081][ T8508] loop3: detected capacity change from 0 to 32768 [ 140.675218][ T8519] loop5: detected capacity change from 0 to 131072 [ 140.681217][ T8519] F2FS-fs (loop5): invalid crc value [ 140.730901][ T8519] F2FS-fs (loop5): Found nat_bits in checkpoint [ 140.750130][ T8519] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 142.365462][ T8585] loop5: detected capacity change from 0 to 8192 [ 142.409612][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.411539][ T8585] FAT-fs (loop5): Filesystem has been set read-only [ 142.413086][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.414934][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.417536][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.425647][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.428915][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.430799][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.432631][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.437059][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.439262][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.440920][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.442828][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.444604][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.446545][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.448504][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.450230][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.451970][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.453795][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.455666][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.458973][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.467210][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.469174][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.471093][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.473001][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.474873][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.478398][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.480286][ T8585] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 142.676036][ T8592] loop3: detected capacity change from 0 to 8 [ 142.697093][ T8592] SQUASHFS error: xz decompression failed, data probably corrupt [ 142.698696][ T8592] SQUASHFS error: Failed to read block 0x108: -5 [ 142.700007][ T8592] SQUASHFS error: Unable to read metadata cache entry [106] [ 142.703962][ T8592] SQUASHFS error: Unable to read inode 0x11f [ 142.836275][ T8594] loop5: detected capacity change from 0 to 16 [ 142.886312][ T8594] erofs (device loop5): mounted with root inode @ nid 36. [ 142.906935][ T8594] overlay: ./file2 is not a directory [ 143.097171][ T38] team0 (unregistering): Port device team_slave_1 removed [ 143.318272][ T8596] __nla_validate_parse: 32 callbacks suppressed [ 143.318289][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 143.449774][ T8599] loop3: detected capacity change from 0 to 1024 [ 143.559908][ T38] team0 (unregistering): Port device team_slave_0 removed [ 143.838612][ T8606] loop3: detected capacity change from 0 to 16 [ 145.541679][ T8620] loop3: detected capacity change from 0 to 8192 [ 145.589199][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.591130][ T8620] FAT-fs (loop3): Filesystem has been set read-only [ 145.592530][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.594537][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.596378][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.598585][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.600356][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.602031][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.603864][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.605611][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.607661][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.609529][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.611272][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.612993][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.614785][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.616526][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.619025][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.621555][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.623385][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.625261][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.627576][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.630244][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.632240][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.634078][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.635857][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.645596][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.647768][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 145.649663][ T8620] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 146.735845][ T8634] loop5: detected capacity change from 0 to 16 [ 146.834187][ T8634] erofs (device loop5): mounted with root inode @ nid 36. [ 146.851718][ T8634] overlay: ./file2 is not a directory [ 147.301352][ T8636] binder: 8635:8636 got reply transaction with no transaction stack [ 147.302981][ T8636] binder: 8635:8636 transaction reply to 0:0 failed 5/29201/-71, size 0-0 line 3052 [ 147.317496][ T8636] binder: 8635:8636 ioctl c0306201 0 returned -14 [ 147.319154][ T6472] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.452262][ T8503] vlan2: entered promiscuous mode [ 147.453345][ T8503] vlan2: entered allmulticast mode [ 147.496724][ T8137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.545297][ T8137] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.568422][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.569966][ T8551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.585916][ T44] hfsplus: b-tree write err: -5, ino 4 [ 147.601000][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.602551][ T8078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.586167][ T8137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.594826][ T8137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.708604][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.926173][ T8137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.045181][ T8068] veth0_vlan: entered promiscuous mode [ 149.069461][ T8068] veth1_vlan: entered promiscuous mode [ 149.099097][ T8068] veth0_macvtap: entered promiscuous mode [ 149.327174][ T8068] veth1_macvtap: entered promiscuous mode [ 149.761425][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.764117][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.766429][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.768885][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.771262][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.773576][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.775950][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.778442][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.830496][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.998725][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.000994][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.002931][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.005167][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.007557][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.051749][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.054278][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.056784][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.069896][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.101543][ T8068] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.103888][ T8068] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.106108][ T8068] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.108410][ T8068] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.576047][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.786703][ T8705] loop6: detected capacity change from 0 to 32768 [ 150.791718][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.793793][ T8705] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.426 (8705) [ 150.801511][ T8705] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.803689][ T8705] BTRFS info (device loop6): using crc32c (crc32c-arm64) checksum algorithm [ 150.805710][ T8705] BTRFS info (device loop6): using free-space-tree [ 150.858862][ T8137] veth0_vlan: entered promiscuous mode [ 150.865056][ T8137] veth1_vlan: entered promiscuous mode [ 150.881920][ T8435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.883516][ T8435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.998384][ T8137] veth0_macvtap: entered promiscuous mode [ 151.013261][ T8732] BTRFS info (device loop6 state M): max_inline set to 0 [ 151.015610][ T8137] veth1_macvtap: entered promiscuous mode [ 151.024464][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.026684][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.033116][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.036356][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.040015][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.042409][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.044640][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.046793][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.052926][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.059695][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.066654][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.095635][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.122267][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.134058][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.177592][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.179791][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.181934][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.184231][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.186572][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.524654][ T8137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.688703][ T8137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.789753][ T8137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.832645][ T7248] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.850220][ T8137] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.852034][ T8137] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.853782][ T8137] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.855664][ T8137] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.193273][ T2092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.194982][ T2092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.576018][ T7133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.745673][ T7133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.940113][ T8767] netlink: 'syz.5.436': attribute type 1 has an invalid length. [ 153.026418][ T8772] loop6: detected capacity change from 0 to 4096 [ 153.035276][ T8772] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 153.038562][ T8772] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 153.040146][ T8772] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 153.041473][ T8772] ntfs3(loop6): Failed to load $LogFile (-22). [ 153.042929][ T8772] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 153.168083][ T8765] loop7: detected capacity change from 0 to 8192 [ 153.178607][ T8776] loop5: detected capacity change from 0 to 1024 [ 153.282248][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 153.735221][ T8765] FAT-fs (loop7): Filesystem has been set read-only [ 153.968442][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 153.970256][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 153.971934][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 153.973799][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 153.975546][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.031081][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.032916][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.034840][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.036643][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.038821][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.040711][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.079851][ T8786] loop5: detected capacity change from 0 to 2048 [ 154.089261][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.440'. [ 154.092901][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.094799][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.096581][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.103486][ T8791] netlink: 'syz.8.328': attribute type 32 has an invalid length. [ 154.103961][ T8789] bond1: entered promiscuous mode [ 154.105069][ T8791] netlink: 88 bytes leftover after parsing attributes in process `syz.8.328'. [ 154.106246][ T8789] bond1: entered allmulticast mode [ 154.116684][ T8789] batadv1: entered allmulticast mode [ 154.120045][ T8789] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.137277][ T8789] batadv1: entered promiscuous mode [ 154.142432][ T8789] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 154.192837][ T8793] xfrm0: entered allmulticast mode [ 154.237172][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.245550][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.340596][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.420949][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.471774][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.573942][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.614712][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.670732][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.713624][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.742551][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.761143][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 154.774777][ T8765] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 155.057179][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.439'. [ 156.524520][ T8830] loop3: detected capacity change from 0 to 16 [ 156.528421][ T8825] loop8: detected capacity change from 0 to 16 [ 156.595303][ T8825] erofs (device loop8): mounted with root inode @ nid 36. [ 156.595559][ T8830] erofs (device loop3): mounted with root inode @ nid 36. [ 156.609655][ T8825] FAULT_INJECTION: forcing a failure. [ 156.609655][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.611481][ T8830] overlay: ./file2 is not a directory [ 156.612214][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.8.448 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 156.615484][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.617720][ T8825] Call trace: [ 156.618397][ T8825] show_stack+0x2c/0x3c (C) [ 156.619369][ T8825] dump_stack_lvl+0xe4/0x150 [ 156.620434][ T8825] dump_stack+0x1c/0x28 [ 156.621356][ T8825] should_fail_ex+0x3b0/0x50c [ 156.622393][ T8825] should_fail+0x14/0x24 [ 156.623218][ T8825] should_fail_usercopy+0x20/0x30 [ 156.624331][ T8825] strncpy_from_user+0x44/0x310 [ 156.625415][ T8825] path_getxattrat+0x178/0x3bc [ 156.626532][ T8825] __arm64_sys_lgetxattr+0xa4/0xbc [ 156.627655][ T8825] invoke_syscall+0x98/0x2b8 [ 156.628659][ T8825] el0_svc_common+0x130/0x23c [ 156.629651][ T8825] do_el0_svc+0x48/0x58 [ 156.630549][ T8825] el0_svc+0x54/0x168 [ 156.631360][ T8825] el0t_64_sync_handler+0x84/0x108 [ 156.632508][ T8825] el0t_64_sync+0x198/0x19c [ 156.635430][ T8825] overlay: ./file2 is not a directory [ 158.541938][ T8849] netlink: 32 bytes leftover after parsing attributes in process `syz.7.451'. [ 158.543991][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.7.451'. [ 158.855880][ T8854] loop7: detected capacity change from 0 to 8192 [ 158.924230][ T8865] loop8: detected capacity change from 0 to 256 [ 158.934187][ T8865] exfat: Deprecated parameter 'utf8' [ 158.974548][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 158.976980][ T8854] FAT-fs (loop7): Filesystem has been set read-only [ 158.978563][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 158.980500][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 158.982293][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.037137][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.043484][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.046614][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.076528][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.083944][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.086579][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.096220][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.106188][ T8865] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x9ae00b1e, utbl_chksum : 0xe619d30d) [ 159.109726][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.113860][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.117626][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.123468][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.129952][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.133758][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.144873][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.779529][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 159.781258][ T8854] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 160.272295][ T8899] loop7: detected capacity change from 0 to 512 [ 161.116809][ T8899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.119710][ T8899] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.154232][ T8899] EXT4-fs (loop7): 1 truncate cleaned up [ 161.155795][ T8899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.183335][ T8897] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.464: corrupted in-inode xattr: overlapping e_value [ 161.188188][ T8897] EXT4-fs warning (device loop7): ext4_xattr_set_entry:1772: inode #15: comm syz.7.464: unable to update i_inline_off [ 161.190666][ T8897] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 161.193075][ T8897] EXT4-fs error (device loop7): ext4_xattr_ibody_get:653: inode #15: comm syz.7.464: corrupted in-inode xattr: overlapping e_value [ 161.369248][ T8068] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.179771][ T8925] syz.5.470 uses obsolete (PF_INET,SOCK_PACKET) [ 162.567504][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.569273][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.572045][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.575907][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.597031][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.775438][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.802605][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.846899][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.900154][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 162.950253][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.286957][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.288580][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.290160][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.291750][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.293218][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.294660][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.300070][ T8938] loop5: detected capacity change from 0 to 2048 [ 163.310684][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.312221][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.317563][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.319162][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.323962][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.325502][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.336898][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.338526][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.339986][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.341757][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.343280][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.344762][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.347266][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.348695][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.350137][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.351549][ T6412] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.398194][ T8930] loop3: detected capacity change from 0 to 32768 [ 163.399838][ T8938] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 163.427479][ T6412] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 163.627658][ T8963] loop7: detected capacity change from 0 to 8192 [ 163.760990][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.762865][ T8963] FAT-fs (loop7): Filesystem has been set read-only [ 163.786148][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.813583][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.820436][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.837265][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.840010][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 163.860910][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.383192][ T6430] Bluetooth: hci3: command 0x0406 tx timeout [ 164.410208][ T8930] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 164.413800][ T8930] bcachefs (loop3): initializing new filesystem [ 164.448767][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.450600][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.452392][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.454197][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.459890][ T8930] bcachefs (loop3): going read-write [ 164.525931][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.528798][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.530606][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.532252][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.534098][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.535898][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.597953][ T8930] bcachefs (loop3): marking superblocks [ 164.609407][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.611693][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.613495][ T8963] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 164.633415][ T8930] bcachefs (loop3): initializing freespace [ 164.660865][ T8930] bcachefs (loop3): done initializing freespace [ 164.748576][ T8990] loop8: detected capacity change from 0 to 16 [ 164.862868][ T8930] bcachefs (loop3): reading snapshots table [ 164.865037][ T8930] bcachefs (loop3): reading snapshots done [ 164.901034][ T8990] erofs (device loop8): mounted with root inode @ nid 36. [ 164.928643][ T8990] overlay: ./file2 is not a directory [ 165.216885][ T8992] binder: 8991:8992 got reply transaction with no transaction stack [ 165.222728][ T8992] binder: 8991:8992 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 3052 [ 165.227758][ T8992] binder: 8991:8992 ioctl c0306201 0 returned -14 [ 165.237308][ T8972] loop5: detected capacity change from 0 to 32768 [ 165.257618][ T8757] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.410440][ T8930] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR [ 165.412446][ T8930] bcachefs (loop3): error starting copygc thread [ 165.413864][ T8930] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 165.415677][ T8930] bcachefs (loop3): shutting down [ 165.416805][ T8930] bcachefs (loop3): going read-only [ 165.418196][ T8930] bcachefs (loop3): finished waiting for writes to stop [ 165.419685][ T8930] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 165.487391][ T9004] netlink: 32 bytes leftover after parsing attributes in process `syz.8.483'. [ 165.489421][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.8.483'. [ 165.535942][ T8999] loop7: detected capacity change from 0 to 40427 [ 165.564809][ T8999] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 165.566486][ T8999] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x2 [ 165.568521][ T8999] F2FS-fs (loop7): Image doesn't support compression [ 165.569928][ T8999] F2FS-fs (loop7): Image doesn't support compression [ 165.613356][ T8999] F2FS-fs (loop7): invalid crc value [ 165.636477][ T8999] F2FS-fs (loop7): Found nat_bits in checkpoint [ 165.650759][ T8999] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 165.668826][ T8930] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5 [ 165.676240][ T8999] syz.7.481: attempt to access beyond end of device [ 165.676240][ T8999] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 165.734328][ T8930] bcachefs (loop3): shutdown complete, journal seq 6 [ 165.736433][ T8930] bcachefs (loop3): marking filesystem clean [ 165.779461][ T8930] bcachefs (loop3): shutdown complete [ 166.175121][ T8068] syz-executor: attempt to access beyond end of device [ 166.175121][ T8068] loop7: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 166.195607][ T8068] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 166.208106][ T8068] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 167.567902][ T9043] loop8: detected capacity change from 0 to 32768 [ 167.598253][ T9043] bcachefs (/dev/loop8): error reading default superblock: checksum error, type crc32c_nonzero: got 65ed50b7 should be 29d2fb78 [ 167.601359][ T9043] bcachefs (/dev/loop8): error reading superblock: checksum error, type crc32c_nonzero: got 435293c7 should be a8deb8c1Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.13: inode_has_child_snapshots) [ 167.608629][ T9043] bcachefs: bch2_fs_get_tree() error: invalid_sb_version [ 167.870936][ T9058] loop7: detected capacity change from 0 to 8192 [ 167.977519][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.492'. [ 168.146564][ T9083] loop5: detected capacity change from 0 to 1024 [ 168.627328][ T9088] netlink: 23 bytes leftover after parsing attributes in process `syz.8.500'. [ 172.302823][ T9139] loop8: detected capacity change from 0 to 8192 [ 172.352122][ T9127] loop5: detected capacity change from 0 to 4096 [ 172.408826][ T9127] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 172.591313][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.510'. [ 172.623356][ T9144] netlink: 'syz.8.509': attribute type 32 has an invalid length. [ 172.624972][ T9144] netlink: 88 bytes leftover after parsing attributes in process `syz.8.509'. [ 172.626131][ T9127] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 172.716084][ T8930] bcachefs: bch2_fs_get_tree() error: EINTR [ 172.738242][ T9127] netlink: 104 bytes leftover after parsing attributes in process `syz.5.507'. [ 173.229589][ T9161] loop7: detected capacity change from 0 to 8192 [ 173.406022][ T9179] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 173.454086][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.522'. [ 174.003120][ T9180] loop6: detected capacity change from 0 to 256 [ 174.079391][ T9180] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.249497][ T9201] loop5: detected capacity change from 0 to 1024 [ 174.786664][ T9209] loop3: detected capacity change from 0 to 4096 [ 174.964590][ T9221] loop6: detected capacity change from 0 to 1024 [ 175.029475][ T9195] loop7: detected capacity change from 0 to 32768 [ 175.031304][ T9195] btrfs: Deprecated parameter 'usebackuproot' [ 175.032713][ T9195] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.034601][ T9195] btrfs: Deprecated parameter 'usebackuproot' [ 175.035910][ T9195] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 175.066193][ T9195] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.525 (9195) [ 175.087210][ T9195] BTRFS info (device loop7 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.089588][ T9195] BTRFS info (device loop7 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 175.103875][ T9195] BTRFS info (device loop7 state S): using free-space-tree [ 175.105503][ T9195] workqueue: max_active 4349 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 175.132185][ T9195] workqueue: max_active 4349 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 175.179482][ T9195] workqueue: max_active 4349 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 175.188359][ T9195] workqueue: max_active 4349 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 175.197386][ T9195] workqueue: max_active 4349 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 175.205939][ T9195] workqueue: max_active 4349 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 175.234343][ T9195] workqueue: max_active 4349 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 175.409334][ T9250] loop5: detected capacity change from 0 to 512 [ 175.411217][ T9250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.416942][ T8078] BTRFS warning (device loop7 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xc31f6b8dd4e8410de7c99134cc770d2b2c9962171fae204af998e9068094381a level 0, ignored [ 175.440276][ T9195] BTRFS warning (device loop7 state S): devid 1099511599873 uuid a3373a75-1192-444c-9807-48156503709a is missing [ 175.444804][ T9250] EXT4-fs: old and new quota format mixing [ 175.454091][ T9195] BTRFS warning (device loop7 state S): devid 1 uuid a3370675-1192-444c-9807-48156503709a is missing [ 175.482327][ T9250] loop5: detected capacity change from 0 to 512 [ 175.499401][ T9250] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 175.522812][ T9250] EXT4-fs: failed to create workqueue [ 175.537035][ T9195] BTRFS warning (device loop7 state S): couldn't read tree root [ 175.538546][ T9250] EXT4-fs (loop5): mount failed [ 175.538612][ T9195] BTRFS warning (device loop7 state S): try to load backup roots slot 1 [ 175.547770][ T9195] BTRFS warning (device loop7 state S): couldn't read tree root [ 175.549333][ T9195] BTRFS warning (device loop7 state S): try to load backup roots slot 2 [ 175.553506][ T9195] BTRFS warning (device loop7 state S): couldn't read tree root [ 175.555001][ T9195] BTRFS warning (device loop7 state S): try to load backup roots slot 3 [ 175.563396][ T9195] BTRFS warning (device loop7 state S): couldn't read tree root [ 175.595235][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.536'. [ 175.606468][ T9258] netlink: 24 bytes leftover after parsing attributes in process `syz.6.536'. [ 175.618430][ T9195] BTRFS error (device loop7 state S): open_ctree failed [ 177.318271][ T9296] binder: 9295:9296 got reply transaction with no transaction stack [ 177.319985][ T9296] binder: 9295:9296 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 3052 [ 177.335461][ T9296] binder: 9295:9296 ioctl c0306201 0 returned -14 [ 177.356952][ T3829] binder: undelivered TRANSACTION_ERROR: 29201 [ 177.672944][ T9307] loop7: detected capacity change from 0 to 16 [ 178.308822][ T9307] erofs (device loop7): mounted with root inode @ nid 36. [ 178.328314][ T9307] overlay: ./file2 is not a directory [ 178.860647][ T9322] loop6: detected capacity change from 0 to 128 [ 178.880011][ T9322] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.889297][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.550'. [ 178.974569][ T9322] fscrypt (loop6, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 179.784113][ T9341] netlink: 'syz.3.554': attribute type 32 has an invalid length. [ 179.794187][ T9341] netlink: 88 bytes leftover after parsing attributes in process `syz.3.554'. [ 179.841757][ T9345] loop5: detected capacity change from 0 to 512 [ 179.875077][ T9345] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 179.958556][ T9345] UDF-fs: error (device loop5): udf_read_inode: (ino 19) failed ident=264 [ 179.996297][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.555'. [ 179.999534][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.5.555'. [ 180.035547][ T9353] loop8: detected capacity change from 0 to 4096 [ 180.102432][ T9353] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 180.117925][ T9353] ntfs3(loop8): Failed to load $Secure (-22). [ 180.119212][ T9353] ntfs3(loop8): Failed to initialize $Secure (-22). [ 180.190489][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 180.284585][ T9359] loop3: detected capacity change from 0 to 8192 [ 180.370795][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.372548][ T9359] FAT-fs (loop3): Filesystem has been set read-only [ 180.375574][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.496161][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.557047][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.622645][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.740198][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.805404][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.911005][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.912823][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.914817][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.917558][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.919416][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.921321][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.926106][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.928048][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.929855][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.931596][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.933504][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.935386][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.937467][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.939696][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.941487][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.942988][ T9367] bond1: entered promiscuous mode [ 180.943180][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.946163][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.948049][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.949806][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.951474][ T9359] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 180.962639][ T9367] bond1: entered allmulticast mode [ 180.966515][ T9370] batadv1: entered allmulticast mode [ 180.968503][ T9370] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 180.970568][ T9370] batadv1: entered promiscuous mode [ 180.971992][ T9370] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 181.140583][ T7248] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.359614][ T9391] loop3: detected capacity change from 0 to 1024 [ 181.933119][ T9393] can: request_module (can-proto-0) failed. [ 182.863473][ T9429] xfrm0: entered allmulticast mode [ 184.473614][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.580'. [ 184.515433][ T9450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.582'. [ 184.521039][ T9448] loop5: detected capacity change from 0 to 512 [ 184.569547][ T9446] bond1: entered promiscuous mode [ 184.570647][ T9446] bond1: entered allmulticast mode [ 184.571853][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 184.577077][ T9450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.596050][ T9448] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.600045][ T9451] batadv1: entered allmulticast mode [ 184.600727][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.604847][ T9451] batadv1: entered promiscuous mode [ 184.605102][ T9451] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 184.808676][ T9459] loop6: detected capacity change from 0 to 16 [ 185.050290][ T9459] erofs (device loop6): mounted with root inode @ nid 36. [ 185.069388][ T9458] overlay: ./file2 is not a directory [ 185.267873][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.575'. [ 185.275769][ T9463] netlink: 32 bytes leftover after parsing attributes in process `syz.7.584'. [ 185.278547][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.7.584'. [ 185.376364][ T9448] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.581: corrupted in-inode xattr: e_value out of bounds [ 185.379782][ T9448] EXT4-fs (loop5): Remounting filesystem read-only [ 185.383983][ T9448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.596204][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.585'. [ 185.725478][ T6933] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.841076][ T9476] loop3: detected capacity change from 0 to 4096 [ 186.016948][ T9476] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 186.056692][ T9476] ntfs3(loop3): $Volume is corrupted. [ 186.109704][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.5.588'. [ 186.794092][ T9497] loop6: detected capacity change from 0 to 8192 [ 186.889130][ T9497] FAULT_INJECTION: forcing a failure. [ 186.889130][ T9497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.914250][ T9497] CPU: 0 UID: 0 PID: 9497 Comm: syz.6.593 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 186.916551][ T9497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.918832][ T9497] Call trace: [ 186.919569][ T9497] show_stack+0x2c/0x3c (C) [ 186.920499][ T9497] dump_stack_lvl+0xe4/0x150 [ 186.921363][ T9497] dump_stack+0x1c/0x28 [ 186.922714][ T9497] should_fail_ex+0x3b0/0x50c [ 186.923626][ T9497] should_fail+0x14/0x24 [ 186.924528][ T9497] should_fail_usercopy+0x20/0x30 [ 186.925502][ T9497] strncpy_from_user+0x44/0x310 [ 186.926528][ T9497] getname_flags+0x100/0x4b4 [ 186.927452][ T9497] getname+0x24/0x34 [ 186.928177][ T9497] __arm64_sys_execve+0x78/0xb0 [ 186.929230][ T9497] invoke_syscall+0x98/0x2b8 [ 186.930260][ T9497] el0_svc_common+0x130/0x23c [ 186.931244][ T9497] do_el0_svc+0x48/0x58 [ 186.932226][ T9497] el0_svc+0x54/0x168 [ 186.933165][ T9497] el0t_64_sync_handler+0x84/0x108 [ 186.934223][ T9497] el0t_64_sync+0x198/0x19c [ 187.456265][ T2350] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.461284][ T2350] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.097074][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.164597][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.168013][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.177985][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.195922][ T9556] netem: unknown loss type 0 [ 188.198153][ T9556] netem: change failed [ 188.327526][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.5.613'. [ 188.367022][ T9568] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦ [ 188.473831][ T9574] netlink: 'syz.3.614': attribute type 29 has an invalid length. [ 188.491186][ T9574] netlink: 'syz.3.614': attribute type 29 has an invalid length. [ 188.493661][ T9574] netlink: 'syz.3.614': attribute type 29 has an invalid length. [ 188.885591][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.885757][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.057772][ T9607] bond0: entered promiscuous mode [ 189.057795][ T9607] bond_slave_0: entered promiscuous mode [ 189.057884][ T9607] bond_slave_1: entered promiscuous mode [ 189.113860][ T9613] binder: 9612:9613 got reply transaction with no transaction stack [ 189.113883][ T9613] binder: 9612:9613 transaction reply to 0:0 failed 8/29201/-71, size 0-0 line 3052 [ 189.114812][ T8757] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.170248][ T9617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.172137][ T9617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.470838][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.480859][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.493297][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.536959][ T6430] Bluetooth: hci5: command 0x0406 tx timeout [ 189.793241][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.642'. [ 189.892557][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 190.032301][ T9651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.054731][ T9651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.217459][ T9659] xt_CT: No such helper "netbios-ns" [ 190.555516][ T9673] @: renamed from vlan0 (while UP) [ 190.787410][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.792952][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.206213][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.210580][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.492240][ T9728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.494175][ T9728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.503981][ T9719] netlink: 'syz.7.670': attribute type 9 has an invalid length. [ 192.043659][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.045491][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.154527][ T9765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.156529][ T9765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.572282][ T9794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.574117][ T9794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.649253][ T30] audit: type=1326 audit(192.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa359a28 code=0x7ffc0000 [ 192.665074][ T30] audit: type=1326 audit(192.640:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa359a28 code=0x7ffc0000 [ 192.682854][ T30] audit: type=1326 audit(192.640:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=68 compat=0 ip=0xffffaa359a28 code=0x7ffc0000 [ 192.704519][ T30] audit: type=1326 audit(192.640:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa359a28 code=0x7ffc0000 [ 192.722837][ T30] audit: type=1326 audit(192.640:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.8.699" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa359a28 code=0x7ffc0000 [ 193.088617][ T9824] sctp: [Deprecated]: syz.5.706 (pid 9824) Use of int in maxseg socket option. [ 193.088617][ T9824] Use struct sctp_assoc_value instead [ 193.261746][ T9833] syz_tun: entered allmulticast mode [ 193.308474][ T9833] syz_tun: left allmulticast mode [ 193.327770][ T9838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.329583][ T9838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.564330][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.569397][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.259414][ T9972] capability: warning: `syz.5.737' uses 32-bit capabilities (legacy support in use) [ 195.545019][ T9991] netlink: 7288 bytes leftover after parsing attributes in process `syz.8.742'. [ 195.842809][T10009] netlink: 'syz.5.751': attribute type 6 has an invalid length. [ 195.844158][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.852448][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.879775][T10079] IPVS: length: 58 != 8 [ 196.955258][T10084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.967460][T10084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.003952][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.779'. [ 197.030811][ T30] audit: type=1326 audit(197.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad159a28 code=0x7ffc0000 [ 197.069350][ T30] audit: type=1326 audit(197.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=80 compat=0 ip=0xffffad159a28 code=0x7ffc0000 [ 197.101118][ T30] audit: type=1326 audit(197.030:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad159a28 code=0x7ffc0000 [ 197.105335][ T30] audit: type=1326 audit(197.030:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad159a28 code=0x7ffc0000 [ 197.159413][ T30] audit: type=1326 audit(197.030:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10082 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffffad159a28 code=0x7ffc0000 [ 199.333113][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.335112][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.369392][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.378572][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.392908][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.429255][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.516163][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.793'. [ 199.734287][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.739059][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.873542][T10166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.887303][T10166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.929504][T10169] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(3985371298792) <= P.seqno(0) <= S.SWH(3985371298866)) and (P.ackno exists or LAWL(92637677838413) <= P.ackno(92637677838414) <= S.AWH(92637677838414), sending SYNC... [ 200.775694][T10198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.781792][T10198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.212870][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.218211][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.427220][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.812'. [ 234.616850][ C1] sched: DL replenish lagged too much [ 241.963615][ T6430] Bluetooth: hci0: command 0x0406 tx timeout [ 244.624028][ T6427] Bluetooth: hci2: command 0x0406 tx timeout [ 264.371245][ T6437] Bluetooth: hci4: command 0x0406 tx timeout [ 266.730167][ T2350] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.741524][ T2350] ieee802154 phy1 wpan1: encryption failed: -22 [ 282.193132][ C1] ksoftirqd/1: page allocation failure: order:0, mode:0x40820(GFP_ATOMIC|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0 [ 282.193761][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.196231][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 282.198331][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.200228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 282.202305][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.204373][ C1] Call trace: [ 282.205624][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.206165][ C1] show_stack+0x2c/0x3c (C) [ 282.208163][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.208947][ C1] dump_stack_lvl+0xe4/0x150 [ 282.211012][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.211915][ C1] dump_stack+0x1c/0x28 [ 282.213283][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.214033][ C1] warn_alloc+0x220/0x3a4 [ 282.215853][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.216713][ C1] __alloc_pages_slowpath+0xc94/0xd64 [ 282.218898][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.219912][ C1] __alloc_pages_noprof+0x3d4/0x6a8 [ 282.221320][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.222210][ C1] alloc_pages_mpol_noprof+0x33c/0x5f0 [ 282.224033][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.225083][ C1] alloc_pages_noprof+0x168/0x200 [ 282.227129][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.228087][ C1] alloc_slab_page+0xa0/0x16c [ 282.229314][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.230219][ C1] allocate_slab+0x1e4/0x2cc [ 282.232058][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.232911][ C1] ___slab_alloc+0x784/0xf4c [ 282.234882][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.235812][ C1] __slab_alloc+0x74/0xd0 [ 282.237117][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.237851][ C1] kmem_cache_alloc_node_noprof+0x310/0x420 [ 282.239846][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.241002][ C1] __alloc_skb+0x1e0/0x420 [ 282.243025][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.243925][ C1] synproxy_send_client_synack+0x158/0xb68 [ 282.245202][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.246374][ C1] nft_synproxy_eval_v4+0x18c/0x2ec [ 282.248431][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.249476][ C1] nft_synproxy_do_eval+0x2cc/0x6a4 [ 282.251455][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.252485][ C1] nft_synproxy_eval+0x34/0x48 [ 282.253828][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.254631][ C1] nft_do_chain+0x408/0x149c [ 282.256514][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.257436][ C1] nft_do_chain_inet+0x31c/0x528 [ 282.257460][ C1] nf_hook_slow+0xc8/0x234 [ 282.257477][ C1] NF_HOOK+0x22c/0x3d4 [ 282.259413][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.260303][ C1] ip_local_deliver+0x120/0x194 [ 282.261120][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.261894][ C1] ip_rcv_finish+0x220/0x24c [ 282.263199][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.264185][ C1] NF_HOOK+0x328/0x3d4 [ 282.266030][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.266971][ C1] ip_rcv+0x7c/0x9c [ 282.266993][ C1] __netif_receive_skb+0x18c/0x3c8 [ 282.267009][ C1] process_backlog+0x640/0x123c [ 282.269189][ C0] SLUB: Unable to allocate memory on CPU 0 (of node 0) on node -1, gfp=0x820(GFP_ATOMIC) [ 282.269883][ C1] __napi_poll+0xb4/0x3fc [ 282.271128][ C0] cache: skbuff_head_cache, object size: 240, buffer size: 320, default order: 0, min order: 0 [ 282.271922][ C1] net_rx_action+0x6a8/0xf4c [ 282.272893][ C0] node 0: slabs: 315418, objs: 3785016, free: 0 [ 282.273837][ C1] handle_softirqs+0x320/0xd34 [ 282.282241][ C1] run_ksoftirqd+0x70/0xc0 [ 282.283178][ C1] smpboot_thread_fn+0x4b0/0x90c [ 282.284228][ C1] kthread+0x288/0x310 [ 282.285056][ C1] ret_from_fork+0x10/0x20 [ 282.288086][ C1] Mem-Info: [ 282.288789][ C1] active_anon:443 inactive_anon:22290 isolated_anon:0 [ 282.288789][ C1] active_file:2846 inactive_file:6599 isolated_file:0 [ 282.288789][ C1] unevictable:768 dirty:79 writeback:0 [ 282.288789][ C1] slab_reclaimable:10655 slab_unreclaimable:1499864 [ 282.288789][ C1] mapped:28874 shmem:17974 pagetables:943 [ 282.288789][ C1] sec_pagetables:0 bounce:0 [ 282.288789][ C1] kernel_misc_reclaimable:0 [ 282.288789][ C1] free:13172 free_pcp:6414 free_cma:7360 [ 282.297639][ C1] Node 0 active_anon:1772kB inactive_anon:89160kB active_file:11384kB inactive_file:26396kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:115496kB dirty:316kB writeback:0kB shmem:71896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10176kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no [ 282.301749][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 282.303915][ C1] Node 0 DMA free:45584kB boost:0kB min:20856kB low:26068kB high:31280kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:9332kB local_pcp:1152kB free_cma:29440kB [ 282.310929][ C1] lowmem_reserve[]: 0 0 3489 0 0 [ 282.311927][ C1] Node 0 Normal free:7104kB boost:54436kB min:78632kB low:84680kB high:90728kB reserved_highatomic:8192KB active_anon:1772kB inactive_anon:89160kB active_file:11384kB inactive_file:26396kB unevictable:3072kB writepending:316kB present:5242880kB managed:3577808kB mlocked:0kB bounce:0kB free_pcp:16324kB local_pcp:7936kB free_cma:0kB [ 282.318108][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 282.319091][ C1] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 2*32kB (H) 1*64kB (H) 1*128kB (U) 1*256kB (C) 2*512kB (HC) 1*1024kB (H) 1*2048kB (U) 10*4096kB (MC) = 45580kB [ 282.322145][ C1] Node 0 Normal: 1034*4kB (MH) 35*8kB (H) 22*16kB (H) 3*32kB (H) 0*64kB 2*128kB (H) 1*256kB (H) 3*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 6912kB [ 282.325206][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.327136][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 282.328952][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 282.330839][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 282.332608][ C1] 27413 total pagecache pages [ 282.333555][ C1] 0 pages in swap cache [ 282.334469][ C1] Free swap = 124344kB [ 282.335354][ C1] Total swap = 124996kB [ 282.336176][ C1] 2097152 pages RAM [ 282.336957][ C1] 0 pages HighMem/MovableOnly [ 282.337826][ C1] 432652 pages reserved [ 282.338633][ C1] 8192 pages cma reserved [ 282.339531][ C1] 0 pages hwpoisoned [ 283.381010][ T75] [ 283.381626][ T75] ====================================================== [ 283.383017][ T75] WARNING: possible circular locking dependency detected [ 283.384473][ T75] 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 Not tainted [ 283.385759][ T75] ------------------------------------------------------ [ 283.387147][ T75] kswapd0/75 is trying to acquire lock: [ 283.388235][ T75] ffff80008fa1fc10 (cpu_hotplug_lock){++++}-{0:0}, at: zswap_store+0x834/0x185c [ 283.390261][ T75] [ 283.390261][ T75] but task is already holding lock: [ 283.391811][ T75] ffff80008fc71b00 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x1198/0x1d30 [ 283.393694][ T75] [ 283.393694][ T75] which lock already depends on the new lock. [ 283.393694][ T75] [ 283.395808][ T75] [ 283.395808][ T75] the existing dependency chain (in reverse order) is: [ 283.397755][ T75] [ 283.397755][ T75] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 283.399225][ T75] fs_reclaim_acquire+0x84/0x120 [ 283.400385][ T75] __kmalloc_cache_node_noprof+0x5c/0x434 [ 283.401663][ T75] create_worker+0x110/0x644 [ 283.402721][ T75] workqueue_prepare_cpu+0xf0/0x180 [ 283.403845][ T75] cpuhp_invoke_callback+0x404/0x704 [ 283.405172][ T75] _cpu_up+0x3c8/0x70c [ 283.406167][ T75] cpu_up+0x150/0x1d8 [ 283.407197][ T75] cpuhp_bringup_mask+0xb8/0x220 [ 283.408330][ T75] bringup_nonboot_cpus+0x48/0x4c [ 283.409435][ T75] smp_init+0x3c/0x12c [ 283.410499][ T75] kernel_init_freeable+0x30c/0x478 [ 283.411598][ T75] kernel_init+0x24/0x2a0 [ 283.412644][ T75] ret_from_fork+0x10/0x20 [ 283.413799][ T75] [ 283.413799][ T75] -> #0 (cpu_hotplug_lock){++++}-{0:0}: [ 283.415372][ T75] __lock_acquire+0x34f0/0x7904 [ 283.416517][ T75] lock_acquire+0x23c/0x724 [ 283.417627][ T75] cpus_read_lock+0x58/0x2a4 [ 283.418663][ T75] zswap_store+0x834/0x185c [ 283.419673][ T75] swap_writepage+0x958/0xf80 [ 283.420615][ T75] shmem_writepage+0x1064/0x1374 [ 283.421713][ T75] shrink_folio_list+0x29a4/0x498c [ 283.422836][ T75] shrink_lruvec+0x11dc/0x2758 [ 283.423932][ T75] shrink_node+0xf64/0x2668 [ 283.425041][ T75] balance_pgdat+0x101c/0x1d30 [ 283.426136][ T75] kswapd+0x810/0x10e0 [ 283.427134][ T75] kthread+0x288/0x310 [ 283.428150][ T75] ret_from_fork+0x10/0x20 [ 283.429124][ T75] [ 283.429124][ T75] other info that might help us debug this: [ 283.429124][ T75] [ 283.431151][ T75] Possible unsafe locking scenario: [ 283.431151][ T75] [ 283.432705][ T75] CPU0 CPU1 [ 283.433881][ T75] ---- ---- [ 283.435005][ T75] lock(fs_reclaim); [ 283.435903][ T75] lock(cpu_hotplug_lock); [ 283.437268][ T75] lock(fs_reclaim); [ 283.438572][ T75] rlock(cpu_hotplug_lock); [ 283.439491][ T75] [ 283.439491][ T75] *** DEADLOCK *** [ 283.439491][ T75] [ 283.441217][ T75] 1 lock held by kswapd0/75: [ 283.442270][ T75] #0: ffff80008fc71b00 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x1198/0x1d30 [ 283.444301][ T75] [ 283.444301][ T75] stack backtrace: [ 283.445597][ T75] CPU: 1 UID: 0 PID: 75 Comm: kswapd0 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 283.447732][ T75] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 283.449896][ T75] Call trace: [ 283.450752][ T75] show_stack+0x2c/0x3c (C) [ 283.451737][ T75] dump_stack_lvl+0xe4/0x150 [ 283.452704][ T75] dump_stack+0x1c/0x28 [ 283.453591][ T75] print_circular_bug+0x154/0x1c0 [ 283.454577][ T75] check_noncircular+0x310/0x404 [ 283.455692][ T75] __lock_acquire+0x34f0/0x7904 [ 283.456723][ T75] lock_acquire+0x23c/0x724 [ 283.457626][ T75] cpus_read_lock+0x58/0x2a4 [ 283.458678][ T75] zswap_store+0x834/0x185c [ 283.459564][ T75] swap_writepage+0x958/0xf80 [ 283.460582][ T75] shmem_writepage+0x1064/0x1374 [ 283.461727][ T75] shrink_folio_list+0x29a4/0x498c [ 283.462852][ T75] shrink_lruvec+0x11dc/0x2758 [ 283.463854][ T75] shrink_node+0xf64/0x2668 [ 283.464896][ T75] balance_pgdat+0x101c/0x1d30 [ 283.465851][ T75] kswapd+0x810/0x10e0 [ 283.466691][ T75] kthread+0x288/0x310 [ 283.467622][ T75] ret_from_fork+0x10/0x20