last executing test programs: 1m56.676470086s ago: executing program 1 (id=8): remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x20000000000, 0x80000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000001100)={[{@resgid}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001700)=[{&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000001380)=""/190, 0xbe}, {&(0x7f0000001440)=""/235, 0xeb}, {&(0x7f0000000480)}, {&(0x7f0000001540)=""/234, 0xea}, {&(0x7f0000001640)=""/130, 0x82}], 0x7, 0x33, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r4) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r5, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x3f6, 0x300, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x24040884) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15aba33a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f722fc58055b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775aafb8c5509086fdba99db"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x233006a6, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141686089ffe4d2f8702890c6aab845013f2325f1a39010703048da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240), 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x1c, 0x0, 0xc00, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4080) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x560f, &(0x7f00000000c0)) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x9, 0x3ff, 0x8, 0xe}}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], &(0x7f00000005c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 1m52.861489451s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {}, [@RTA_SPORT={0x6, 0x1c, 0x4e20}]}, 0x24}}, 0x0) 1m51.329731292s ago: executing program 1 (id=16): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$eJzs3U1vI3cZAPBnHLubbQNOWw6lEtvQF2URrJM0fYk4lEbi5VQJUe7ZkDhRFCdeJU67iVaQfgIQqgCJC5y4IPEBkFA/AkKqBDcOnEAVZOmBCzIae9xNHDs4Wsezm/x+0mT+8//Hfp7HiSfzFk8AV9ZURLwdEWMR8UpElLP+QjbFYXtKv+/+0b2VdEqi2Xz3n0kkWV/3cz6VPSz1ve9E/CA5HXd3/2BzuVar7pzsPri1sbW8Xl2vbs/Pz72x8ObC6wuzA1aSFM8afToi3vrmpz/78W++/dYfvvb+35b+cfOHaVq3s/FedQxDu/RSjJ9YvjzS35tiq0IAAB4Hz0bEMxHxYkR8JcoxFmduRgMAAACPoeY3Jq51mgAAAMDlVIiIiUgKlex634koFCqV9jW8X4gnC7X6buOra/W97dV0LGIySoW1jVp1NrtWeDJKSbo812o/WH61a3k+uwb3w/L1dLk1BgAAAIzGYtf+/6fl9v4/AAAAcMn0Phk/NvI8AAAAgIvjYnwAAAC4/Oz/AwAAwKX23XfeSafm/aN7rfsArL63v7dZf+/WanV3s7K1t1JZqe/cqazX6+u1amWA/wio1et3XovtvbszjeJuY2Z3/2Bpq7633Vhq3dd7qfrMCGoCAAAATnr6hY/+kkTE4devt6bUE9lYKdfMgEdIUuzquP3lnDIBhuLcH/IztXcxiQAj1/03Hbg67OMDSXdH14bBeL9NhT92d9z4v7FscwAAQD6mv+j8P1xVhbwTAHLzk7wTAHIz8LH4qYvNAxi9ktv8wZV36vx/l/F+A6fO//fTbJ4rIQAAYOgm2rPDyM4FTkShUKl8dlowWduoVWcj4vMR8edy6Vq6PJdjvgAAAAAAAAAAAAAAAAAAAAAAAADwOGo2k2gCAAAAl1pE4e9Jdv+v6fLLE93HB55I/lNuzSPi/V+++/O7y43Gzlza/6/P+hu/yPpfzeMIBgAAAFxFpTNHO/vpnf14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABim+0f3VjrTKON+shjXY7JX/GKMt+bjUYqIJ/+dRPHY45KIGBtC/MMPIuK5XvGTNK2YzLLojl+IiOs5x39qCPHhKvtoMSLe7vX+K8RUa977/VfMpof1yWLrTd4zfmf9N9Zn/fe5AWM8//HvZvrG/yDi+WLv9U8nftIn/ksDxr/9/YODfmPNX0dM9/z7k7RnhewbG1t3Znb3D25tbC2vV9er2/Pzc28svLnw+sLszNpGrZp97Rnjp1/6/eGHfetvBzgev1PnZDvDH/Wr/+UB6//vx3ePnm03S6fjR9x8qffP/7nWvPfrn/5OvJK9POn4dKd92G4fd+O3f7rRL7c0/mqf17/98y83H8Qvnqj/5mDlH6/5V4M9BAC4SLv7B5vLtVp1ZwSNF18b3hMmrUa6FTSi5PNudA52PCr5jOcT/VrkW/u3Hvp5OpvDD/M8fx1aXek+Q++hHFdKAADAhXiw0Z93JgAAAAAAAAAAAAAAAAAAAHB1tf7/f+ycHwT4wvk+aaw75mE+pQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnOl/AQAA//9DhsFC") ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) dup(0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x188, 0x4c, 0x1a, 0x0, 0x73, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x128, 0x188, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3893b573a807d00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000011c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x8004587d, &(0x7f0000000080)) fchmod(r7, 0x10) 1m48.174585357s ago: executing program 1 (id=19): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f0000000dc0), 0x1, 0x4fe, &(0x7f0000000080)="$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") bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) lstat(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640)) 1m46.645637217s ago: executing program 1 (id=24): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m42.692186436s ago: executing program 1 (id=31): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x80, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, 0x40}}, 0x0) 1m40.257486406s ago: executing program 32 (id=31): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x80, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x0, 0x1}}]}, 0x40}}, 0x0) 24.396969746s ago: executing program 5 (id=163): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000088, &(0x7f00000002c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@noflushoncommit}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x282a00) write$cgroup_int(r0, &(0x7f0000000180)=0x16e, 0x12) 20.622082762s ago: executing program 5 (id=168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f0000000080)={[{@abort}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$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") 12.659284594s ago: executing program 5 (id=185): ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x560f, &(0x7f00000000c0)) 12.426095434s ago: executing program 2 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b", @ANYRESOCT=0x0], 0xffdd) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000001900010000000000000000001d0100000c000b00000000000000000008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x30}}, 0x0) 12.393820187s ago: executing program 4 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4094) 12.10785556s ago: executing program 5 (id=188): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) syz_mount_image$efs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2d9, &(0x7f00000003c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000900)=ANY=[@ANYBLOB="0a37f77f2ad8ef1f7c26e0eaad3b397e4fe5f75df2406e64198fc64a952920b05c4b7ad78e5a0d377456af89c2b797ba4b6afa8fcf8a22d8107e7cd0f1105dec9ab678446d993dad15c7f24f8b4915d793b01ac286e04310b6736ea5e9a11e71ccf9fc8af27d063abe49cd6ee0f2db4de6d0fbf7c84fc7a658a30e8eeb694f970e517c374dd620b19920a7fc02939bebf9adadf06a5c09f664b11caff53e040289c2b5cff4a7747c14", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000f00)={&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b00)="3cc2af16a6716be39d6ff90e47931a179daa7e4a3ce40d5330197eda6dfdc2b09292531b84b3ff7c4ea99c37307a05dade06c5c3d6c313a036cbd36dcc7c244ca2ef7a64e4b8ca140c41b234fe207b05c85f745fae26a363729e733bfb55003f9022bc71f862097f862ab40fcc7e00ab7619ccb8d3", 0x75}, {&(0x7f0000000b80)="faf439d46dcedde91639963ab93c50ad9dd976038eb68d938c18082056180acb910573a33feb2f9e70848b96fa37bd6163a3299d18b15956becf8a3677ce09f9db642cf37f31dc69738dcdbed75574bba593534e840ff79408c682290357bcaa9c7a6bc293f212e72095950b20a5f135855e1c3401b403d6d1dc23342204f62a0ddfbd96516ae0adc215e8807b6c2e1204268c5484a450dd100808995b4bd4b64c86e9", 0xa3}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000c40)="ec0d2ad1e5ea2f", 0x7}, {&(0x7f0000000c80)="97271fda4527a94c1f7e", 0xa}, {&(0x7f0000000cc0)="8a5a02eb8bcec39101c50e04f664b932f09ca138e6423207067008627538a43cb9c3c23ded59ba45084bcadf3e85378ad51e2ad28072afff968e5f2e6ed02eeaf1267f3db0cdb7a5186c", 0x4a}, {&(0x7f0000000d40)="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", 0xff}, {&(0x7f0000000e40)="a455817b3afb274ea7", 0x9}], 0x8, 0x0, 0x0, 0x20004810}, 0x40000) r5 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @null, @remote, @rose, @null, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x48, 0x800) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f00000006c0)=""/43, 0x2b}, {&(0x7f0000000700)=""/150, 0x96}], 0x5, &(0x7f0000000840)=""/91, 0x5b}, 0x10103) 12.093854732s ago: executing program 4 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_j1939(r1, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) write$binfmt_script(r2, &(0x7f0000000980)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0hJ\xd6\xc4]\xca\xf1\x8f}|\xf5Z\x9c\xc9\x1f\xd9P'}, {0x20, 'ro\x00'}, {0x20, ':\xf8@\xa5\xd1\xf7\x89md\x1d\x92\x8b\x12\xda\xce\x17a6\xeb`\xd8\xaa\xbc\xed\xcf\xe8\xa0>\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) listen(0xffffffffffffffff, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) open_tree(0xffffffffffffffff, 0x0, 0xc0100) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x4c, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x2f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x248}}, 0x0) 12.036545843s ago: executing program 3 (id=190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x70003, 0x0, [0x7, 0xffffffffffffffff, 0x8, 0x1000000100008003, 0x10002001, 0x0, 0x0, 0x7]}) 11.860038135s ago: executing program 0 (id=191): remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x20000000000, 0x80000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff80000000fe280000000000000800040001000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000001100)={[{@resgid}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001700)=[{&(0x7f0000000300)=""/3, 0x3}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000001380)=""/190, 0xbe}, {&(0x7f0000001440)=""/235, 0xeb}, {&(0x7f0000000480)}, {&(0x7f0000001540)=""/234, 0xea}, {&(0x7f0000001640)=""/130, 0x82}], 0x7, 0x33, 0x0) 10.934568837s ago: executing program 5 (id=192): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x338b, &(0x7f0000000200)={0x0, 0x598d, 0x8, 0x0, 0x239}, &(0x7f0000000080), &(0x7f0000000140)) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xb49e, 0x2000, 0x0, 0x0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000100)=0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r4) r5 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000004c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f0000001c0007800c0004002d2e00000000002e0c0003"], 0x30}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="913a3df11ea1302c000000", @ANYRES16=r7, @ANYBLOB="00082abd7000fcdbdf251b0000000400cc0006002100610000000400cc000400cc000400cc00"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000400)=0x0) sched_setaffinity(r11, 0x8, &(0x7f0000000540)=0x6) syz_io_uring_setup(0x5e4, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r12, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) r13 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) recvfrom$packet(r13, &(0x7f0000000300)=""/96, 0x60, 0x0, 0x0, 0x0) 10.638129807s ago: executing program 3 (id=193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000004200)=@netrom={'nr', 0x0}, 0x10) r3 = accept(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f00000008c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x15, @private2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x6059, @remote, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="250557525332e7c0ab6161cccfc113f5e6a0e931526ffbe39dbeda2eed6c4f330b075eda3ec4c397dd4f245e7a60d50e8e78a883cc156cd99f8f1b4b5bd9c8d0b69f32eb38590b954ed1fe0bb86b1e225d99ea74f52c73ba13cf03dc1fc029c76c1534d525509df8cbe2eb8574dd491b40702ad23cb12a6cfaef538bafca68b2491b78321e20df94647c3c3a88ba8817b0905c44fac7ca46", 0x98}, {&(0x7f0000000500)="1d97ec4842fb4759a40dafcd27a36c720b150a0b3af5cb5ef476b80ad25f50f6d58dabc66f66054c7e03648fb441880e7cbfe23c9570b1b92a8306bf8da1e4b81aac1b22496ce166d535a640dbbd0734b81ec981ddcf241f14a10b734dacc6b3f2e36628c3884d81edf09968567e7377b10d7df0520b8f92864459b7ffb30a5c5705f8084efb49b446f955fe0a6eb78644a155b075154a84c7c1b98f40dd7b28f82a8cee7ddfe8052e38c42f447b1723c12446e1b9cc365a88e13778692b9c63ca1e331eb07a0c3ad1affc8d56f10bf9d6055a80872dcf017f713b5205190c0cc90ae835fc00e34c70c8e6beec2aed5d57a6f1385756", 0xf6}, {&(0x7f0000000600)="71c280cbe9f17e072202fb8426e5c3321701ae81d2e3d40ad94653749ac0a360cccba31db42b6f7739e2148b046016204db7debed3a1ddd21bf2425e190957ac6bb6177bbd5980d0660601495059f8487367f8a30c32466caf15827563032c3466a23c2cd37247044a87d04ade6618bbf809fb47335511e55f2503762fff5682f17aaebc1ae34619004af107e668b8e80476f798639f088c536aa43cb1c76dc69e88d585e992e2abc93a795c7a8cffbd22c1ebfaf7b88069ebc4e368eac56e12c12bc0dbb19c785aa12edf06be2489adbbc8f724ca8c69338b32280451633d8d41abdf2b14cb39e743558d8c8e8caa3f", 0xf0}, {&(0x7f0000000200)="e209b4ece2accd4bacc54e4a893b908c4e0703026fdd7a0c69bbcc8a7ffe38489ffb3890644dc50b7dd37ed5dbfb6fc182ad374c15346c7602b60b857344969edfb5f3bebf8080080e2824ac6cf23e5f1c740587517e0a08bc", 0x59}, {&(0x7f0000000140)="d013886cb66bb35eab29813f4e284d85d89280ea9651aacd0772c8ab2e27e46e2b9380244d05a936e23fb54ee29b10db3df3caa3d712536bf9d375afaa7d369512185dd6ab7ad79fddb5793a769f075dfe11288e255111afb7c2e6826a00b11b6a90f1", 0x63}, {&(0x7f0000000700)="2f543e6a8629e0f7c374a866198635bf5e7c4538b8306fc1eff689ce804a7c57ce9ce7fc37724125581e1059b85f8bbbc251d5bff4ca020dc08acf96c8b069c46e00a0b0e35482fe54fb2f3352d17723d8ae262d8d9d83a58c79923c75cc4a4a7bf8fa93098aee1db1daac9df2103ead9d33034fdd58f7587dbcbca739e433c9df99457d5c0f55c1c6163c5a8e7302db5a972a2b9e912595697b7b7d59e6812ff045296005fc3de062b9a0933befc304987c1bbab5a775b3111d179da26dde64928d1e4a00754a1849819aa1a0c9950e98c0", 0xd2}], 0x6, &(0x7f0000000940)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x3a, 0x1, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r5}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x1, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x26, {0x0, 0x4, 0x11, 0x8, [0x8, 0xb]}}, @ra={0x5, 0x2, 0xdf}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffff7}}, @hoplimit={{0x14, 0x29, 0x34, 0x14}}], 0xc0}}], 0x2, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x1}, 0x18) stat(0x0, 0x0) 8.111533506s ago: executing program 3 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) close(0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ca4c5480ba330c4fa7236fdaa2484e6ca93e8009caee410da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720578e9b84a17fc7d32d0ed230b6fa732"], 0x11, 0x6a0, &(0x7f0000004200)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) truncate(&(0x7f0000000080)='./file1\x00', 0xf60) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x46042, 0x288) 8.064676091s ago: executing program 4 (id=195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x700, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}}, 0x0) 7.994537507s ago: executing program 0 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="16000000000000000400000001", @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'veth0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f0000000080)={[{@abort}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$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") 7.775924695s ago: executing program 4 (id=197): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) rt_sigaction(0x40, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00007041ffff00392cdaab4a73"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 7.573160081s ago: executing program 2 (id=198): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000800)={[{@nls={'nls', 0x3d, 'cp950'}}], [{@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'hfsplusz'}}]}, 0x3, 0x6b6, &(0x7f0000000a00)="$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") r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000007c0)=0x93) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) read$usbfs(r2, 0x0, 0x2300) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 6.634328514s ago: executing program 0 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4094) 6.397365512s ago: executing program 3 (id=200): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@empty, 0x42, r3}) r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000280)={0xe2, {0x1, 0x2, 0x7e08, 0x81}}) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) close(r4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) iopl(0x3) fallocate(0xffffffffffffffff, 0x23, 0xffffffffffffffff, 0x10000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x44}}, 0x4000000) 6.319937671s ago: executing program 5 (id=201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)) r0 = open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) fchmodat(r0, &(0x7f0000000440)='./file0\x00', 0x21) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @local}], 0x10) r2 = inotify_init() syz_read_part_table(0x1055, &(0x7f0000000000)="$eJzsz7EJAjEUBuB3p2hECwvXcBNbZ3AE23MFsXUBe6ewcqInwcNzAZGD7ytC/vwJ4QV/1Q7baV1m0TYRXS0eNWfmZLh7uJbYHcu2Hi3XEXE530/fz3ubWLxj1zwzI8qnyf7D+aq2+9tvpwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAcXgFAAD//4mHDu0=") io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x5, r2, 0x0}]) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000001e80)='./file0\x00', 0x600800, 0x80) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000003240)=@v2={0x2, @aes128, 0x2, '\x00', @c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x1d, 0x2, 0x6) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.110464769s ago: executing program 0 (id=202): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa97, &(0x7f0000001540)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2ca102, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48081}, 0x400c800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa97, &(0x7f0000001540)="$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") (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2ca102, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48081}, 0x400c800) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) (async) 6.073530894s ago: executing program 2 (id=203): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syslog(0x3, 0x0, 0x0) futex(&(0x7f0000000280), 0x5, 0x0, 0x0, &(0x7f0000004000)=0x40, 0x92020007) 6.024082499s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x0, 0x1, 0x9, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x7f, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.060131397s ago: executing program 2 (id=205): syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000640)='./file0\x00', 0x810001, &(0x7f00000002c0)={[{@keep_last_dots}, {@keep_last_dots}, {@namecase}, {}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x1, 0x1503, &(0x7f0000000740)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x100000000000000, 0x0) 4.058589175s ago: executing program 3 (id=206): syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x98837c94fa687777, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3f}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r10, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81) 3.823694447s ago: executing program 0 (id=207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa02000000000000000000640601fe80000000000000000040dfff0000bbfe8000000000000032c1830a000000aa00004e22bcd4c8a454d39f87d6757fa19432e7d4dc414bcac943f4f88339", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="94c20000907800401e0420a11e0c8d9e0000000000000003051200000040000000000000000000000200fe05f989ee13127224407c80fe8a3616b4bf3400006cc81e14823e00000000000000030000000000000008000000"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x82200) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x5a2d, &(0x7f00000004c0)="$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") r3 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005f00)=ANY=[@ANYRES32=r4, @ANYBLOB="b79e25cc0cabfa9aa1a315b9e01613e61a99012eb3520bb881b832add565368ae942dcc030b91bfcc46360d8a98e6f39e7abdacff88c03ccf7591b8517037b10f541976961aab2da36c5fe1bcadd3a8266d9f576e75685e6915d86ff2950093356091b5ce3010cf4afbc97e0601ad9c757af749b3870a24af92e3b949e046c05d0ec6d9135d763ce536b77b601c81dd66996d3a685d03c5e541289f355d0af56b00660b82d38dbc5c2e3f61cde0a7ae5ea0ed16662dbe1c7b92c44094fbb69d4031eb4681aa56bb90dd42fcb712c000f361ef18cfd3eccba87998168ac0bfa99d9a7b2f5e4618c3e49b5369d9ef1"], 0x124}}, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x4001}}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x304}, '\x00', "a15000e7087d63fbfe7e5cb2f5de0c0c", "ac5a6ed2", "0400"}, 0x28) fallocate(r3, 0x3, 0x2, 0x10000) 2.910966398s ago: executing program 2 (id=208): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xf8c, 0x400) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000680)={0x0, 0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)={@cgroup, 0xffffffffffffffff, 0x20, 0x6, 0xffffffffffffffff, @void, @value}, 0x20) ioperm(0x0, 0x12e, 0x8000000000008) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0) getsockopt$inet_int(r0, 0x10d, 0xfb, &(0x7f0000000000), &(0x7f0000000240)=0x4) 2.90455555s ago: executing program 4 (id=209): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, 0x0) 2.817925947s ago: executing program 4 (id=210): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000002140)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4430, &(0x7f0000004480)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.341964689s ago: executing program 2 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) close(0xffffffffffffffff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4810, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="f1e5ca4c5480ba330c4fa7236fdaa2484e6ca93e8009caee410da97394c04c07084f36aacfb1163b6fc130a0a379a44bccd1e4638985aceb5b720578e9b84a17fc7d32d0ed230b6fa732"], 0x11, 0x6a0, &(0x7f0000004200)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) truncate(&(0x7f0000000080)='./file1\x00', 0xf60) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x46042, 0x288) 0s ago: executing program 0 (id=212): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000180)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 83.177031][ T5821] cgroup: Unknown subsys name 'net' [ 83.289632][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.298509][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.889503][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.429483][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.443194][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.512616][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.522162][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.530845][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.537155][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.545886][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.554406][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.554863][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.562474][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.580043][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.585088][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.588145][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.602439][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.603739][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.618900][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.626739][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.665305][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.672649][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.672799][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.696842][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.712226][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.715203][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.725475][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.731037][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.741011][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.750503][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.758947][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.759216][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.774278][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.529239][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 90.557654][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.570677][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.722362][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.795461][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.933584][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.941917][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.950451][ T5835] bridge_slave_0: entered allmulticast mode [ 90.958690][ T5835] bridge_slave_0: entered promiscuous mode [ 91.025284][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.032463][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.042822][ T5835] bridge_slave_1: entered allmulticast mode [ 91.050063][ T5835] bridge_slave_1: entered promiscuous mode [ 91.173337][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.180674][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.187957][ T5837] bridge_slave_0: entered allmulticast mode [ 91.195587][ T5837] bridge_slave_0: entered promiscuous mode [ 91.204059][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.212290][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.219805][ T5831] bridge_slave_0: entered allmulticast mode [ 91.227785][ T5831] bridge_slave_0: entered promiscuous mode [ 91.236149][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.243446][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.251255][ T5831] bridge_slave_1: entered allmulticast mode [ 91.259251][ T5831] bridge_slave_1: entered promiscuous mode [ 91.281979][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.289254][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.297153][ T5841] bridge_slave_0: entered allmulticast mode [ 91.304155][ T5841] bridge_slave_0: entered promiscuous mode [ 91.315970][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.329820][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.339463][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.347702][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.354878][ T5837] bridge_slave_1: entered allmulticast mode [ 91.362242][ T5837] bridge_slave_1: entered promiscuous mode [ 91.403964][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.411298][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.418806][ T5836] bridge_slave_0: entered allmulticast mode [ 91.426840][ T5836] bridge_slave_0: entered promiscuous mode [ 91.434131][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.441423][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.449594][ T5841] bridge_slave_1: entered allmulticast mode [ 91.456896][ T5841] bridge_slave_1: entered promiscuous mode [ 91.523446][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.530806][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.538839][ T5836] bridge_slave_1: entered allmulticast mode [ 91.545973][ T5836] bridge_slave_1: entered promiscuous mode [ 91.587092][ T5835] team0: Port device team_slave_0 added [ 91.610723][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.659225][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.674232][ T5835] team0: Port device team_slave_1 added [ 91.696708][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.711077][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.723125][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.745663][ T5839] Bluetooth: hci4: command tx timeout [ 91.745669][ T5844] Bluetooth: hci0: command tx timeout [ 91.766381][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.779467][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.806229][ T5839] Bluetooth: hci3: command tx timeout [ 91.806238][ T5844] Bluetooth: hci1: command tx timeout [ 91.824460][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.832216][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.859258][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.895804][ T5839] Bluetooth: hci2: command tx timeout [ 91.906398][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.948194][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.955554][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.982500][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.016098][ T5831] team0: Port device team_slave_0 added [ 92.041063][ T5841] team0: Port device team_slave_0 added [ 92.062923][ T5837] team0: Port device team_slave_0 added [ 92.075191][ T5831] team0: Port device team_slave_1 added [ 92.088917][ T5836] team0: Port device team_slave_0 added [ 92.097817][ T5841] team0: Port device team_slave_1 added [ 92.107140][ T5836] team0: Port device team_slave_1 added [ 92.117126][ T5837] team0: Port device team_slave_1 added [ 92.227562][ T836] cfg80211: failed to load regulatory.db [ 92.270784][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.278035][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.304426][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.316914][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.323901][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.350352][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.366690][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.373672][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.400508][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.432038][ T5835] hsr_slave_0: entered promiscuous mode [ 92.439191][ T5835] hsr_slave_1: entered promiscuous mode [ 92.448411][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.456724][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.482904][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.496164][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.503130][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.529117][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.541201][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.548584][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.574805][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.604348][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.611433][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.637478][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.651248][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.658308][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.684260][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.838282][ T5831] hsr_slave_0: entered promiscuous mode [ 92.846468][ T5831] hsr_slave_1: entered promiscuous mode [ 92.853092][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.861361][ T5831] Cannot create hsr debugfs directory [ 92.922730][ T5841] hsr_slave_0: entered promiscuous mode [ 92.930039][ T5841] hsr_slave_1: entered promiscuous mode [ 92.936587][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.944153][ T5841] Cannot create hsr debugfs directory [ 92.963496][ T5836] hsr_slave_0: entered promiscuous mode [ 92.971940][ T5836] hsr_slave_1: entered promiscuous mode [ 92.978385][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.986258][ T5836] Cannot create hsr debugfs directory [ 93.058429][ T5837] hsr_slave_0: entered promiscuous mode [ 93.064950][ T5837] hsr_slave_1: entered promiscuous mode [ 93.071295][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.079705][ T5837] Cannot create hsr debugfs directory [ 93.621310][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.672454][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.684066][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.728546][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.811262][ T5839] Bluetooth: hci4: command tx timeout [ 93.815776][ T5844] Bluetooth: hci0: command tx timeout [ 93.841490][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.865459][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.878112][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.886516][ T5839] Bluetooth: hci3: command tx timeout [ 93.887766][ T5844] Bluetooth: hci1: command tx timeout [ 93.924296][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.966390][ T5844] Bluetooth: hci2: command tx timeout [ 93.986837][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.047067][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.089484][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.103138][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.178379][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.190555][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.208442][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.262687][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.352151][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.381104][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.412904][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.428365][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.442986][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.503545][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.537238][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.544498][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.597334][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.604474][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.624628][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.752346][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.799800][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.807106][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.836846][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.843981][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.894531][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.012950][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.045305][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.068545][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.091672][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.098979][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.197028][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.204215][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.221275][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.241570][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.266226][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.273382][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.282723][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.289909][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.331970][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.339212][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.353798][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.360968][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.424730][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.885275][ T5844] Bluetooth: hci4: command tx timeout [ 95.890771][ T5844] Bluetooth: hci0: command tx timeout [ 95.894107][ T5835] veth0_vlan: entered promiscuous mode [ 95.968396][ T5844] Bluetooth: hci3: command tx timeout [ 95.975354][ T5844] Bluetooth: hci1: command tx timeout [ 96.046057][ T5844] Bluetooth: hci2: command tx timeout [ 96.060760][ T5835] veth1_vlan: entered promiscuous mode [ 96.142977][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.162933][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.191020][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.242446][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.324672][ T5835] veth0_macvtap: entered promiscuous mode [ 96.385684][ T5835] veth1_macvtap: entered promiscuous mode [ 96.442008][ T5836] veth0_vlan: entered promiscuous mode [ 96.493734][ T5831] veth0_vlan: entered promiscuous mode [ 96.538986][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.583778][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.597795][ T5836] veth1_vlan: entered promiscuous mode [ 96.610903][ T5831] veth1_vlan: entered promiscuous mode [ 96.619615][ T5841] veth0_vlan: entered promiscuous mode [ 96.648497][ T5841] veth1_vlan: entered promiscuous mode [ 96.661376][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.671899][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.683168][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.692897][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.817004][ T5841] veth0_macvtap: entered promiscuous mode [ 96.827006][ T5836] veth0_macvtap: entered promiscuous mode [ 96.843831][ T5831] veth0_macvtap: entered promiscuous mode [ 96.885662][ T5831] veth1_macvtap: entered promiscuous mode [ 96.894217][ T5841] veth1_macvtap: entered promiscuous mode [ 96.909291][ T5836] veth1_macvtap: entered promiscuous mode [ 96.951475][ T5837] veth0_vlan: entered promiscuous mode [ 97.019523][ T5837] veth1_vlan: entered promiscuous mode [ 97.028981][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.041152][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.057894][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.068830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.082312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.089329][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.103829][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.113844][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.126189][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.137919][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.161182][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.172840][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.191905][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.204586][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.215657][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.226225][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.237439][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.249386][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.279785][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.290513][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.303545][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.314432][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.324623][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.336733][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.349951][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.358808][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.367903][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.376721][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.385823][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.423218][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.434198][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.434633][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.445009][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.465524][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.468756][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.483054][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.493783][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.504872][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.517820][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.528760][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540386][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.550407][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.561705][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.571639][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.580752][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.590186][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.790156][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.817536][ T5837] veth0_macvtap: entered promiscuous mode [ 97.888599][ T5837] veth1_macvtap: entered promiscuous mode [ 97.923742][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.961843][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.965151][ T5839] Bluetooth: hci4: command tx timeout [ 97.974639][ T5844] Bluetooth: hci0: command tx timeout [ 98.031947][ T5919] loop3: detected capacity change from 0 to 256 [ 98.043370][ T5919] vfat: Unknown parameter 'uni_Â' [ 98.049581][ T5844] Bluetooth: hci1: command tx timeout [ 98.055291][ T5844] Bluetooth: hci3: command tx timeout [ 98.119787][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.172381][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.192585][ T5839] Bluetooth: hci2: command tx timeout [ 98.202219][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.224329][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.237268][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.259998][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.273618][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.290741][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.303301][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.322767][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.341712][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.344264][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.362790][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.373259][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.383903][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.393832][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.415400][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.435029][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.446006][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.478563][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.488120][ T5921] 9pnet_fd: Insufficient options for proto=fd [ 98.551513][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.579360][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.594813][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.618786][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.627635][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.636465][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.803124][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.829374][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.842703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.865774][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.978255][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.006351][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.141138][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.203450][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.288861][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.312035][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.735867][ T5929] ======================================================= [ 99.735867][ T5929] WARNING: The mand mount option has been deprecated and [ 99.735867][ T5929] and is ignored by this kernel. Remove the mand [ 99.735867][ T5929] option from the mount to silence this warning. [ 99.735867][ T5929] ======================================================= [ 100.718911][ T5936] loop1: detected capacity change from 0 to 512 [ 100.812943][ T5936] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.942778][ T5936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.034559][ T5936] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 102.585359][ T5946] futex_wake_op: syz.2.6 tries to shift op by 32; fix this program [ 104.606152][ T5952] mmap: syz.1.8 (5952) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.764061][ T5954] loop1: detected capacity change from 0 to 512 [ 104.856689][ T5956] loop2: detected capacity change from 0 to 256 [ 104.923821][ T5954] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.127440][ T5956] FAT-fs (loop2): Directory bread(block 64) failed [ 105.169204][ T5956] FAT-fs (loop2): Directory bread(block 65) failed [ 105.208610][ T5956] FAT-fs (loop2): Directory bread(block 66) failed [ 105.242385][ T5956] FAT-fs (loop2): Directory bread(block 67) failed [ 105.273680][ T5956] FAT-fs (loop2): Directory bread(block 68) failed [ 105.328041][ T5956] FAT-fs (loop2): Directory bread(block 69) failed [ 105.361896][ T5956] FAT-fs (loop2): Directory bread(block 70) failed [ 105.391106][ T5956] FAT-fs (loop2): Directory bread(block 71) failed [ 105.437883][ T5956] FAT-fs (loop2): Directory bread(block 72) failed [ 105.465748][ T5956] FAT-fs (loop2): Directory bread(block 73) failed [ 105.481409][ T5951] warning: `syz.4.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.360029][ T5965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 108.573007][ T5978] loop1: detected capacity change from 0 to 512 [ 108.709124][ T5978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.806683][ T5978] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.273618][ T5985] ip6t_srh: unknown srh invflags 7D00 [ 111.037021][ T5990] loop4: detected capacity change from 0 to 512 [ 111.127252][ T5990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.140133][ T5990] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.201954][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.261706][ T5994] loop3: detected capacity change from 0 to 1024 [ 111.348119][ T5994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.418530][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.567388][ T5999] loop1: detected capacity change from 0 to 512 [ 111.672453][ T5999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.729292][ T6003] loop4: detected capacity change from 0 to 16 [ 111.755168][ T5999] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.806548][ T6005] loop0: detected capacity change from 0 to 128 [ 111.835738][ T6003] erofs (device loop4): mounted with root inode @ nid 36. [ 111.851166][ T29] audit: type=1800 audit(1739715998.478:2): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 112.044747][ T29] audit: type=1804 audit(1739715998.638:3): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.22" name="/newroot/4/file2/bus" dev="loop0" ino=4 res=1 errno=0 [ 112.472768][ T5988] loop2: detected capacity change from 0 to 40427 [ 112.500378][ T5988] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 112.513807][ T5988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 112.532016][ T5988] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 112.562547][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.603336][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.609109][ T5988] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.679514][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.747331][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.783732][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.856018][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.861644][ T5988] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.883056][ T5988] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.903000][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.924383][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 112.978198][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 113.035820][ T5831] EXT4-fs error (device loop1): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 113.408291][ T6018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.444145][ T6013] loop4: detected capacity change from 0 to 40427 [ 115.681398][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.817742][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.924288][ T6028] loop0: detected capacity change from 0 to 512 [ 116.001158][ T6028] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 116.010220][ T6028] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 116.399534][ T6027] loop2: detected capacity change from 0 to 512 [ 116.589626][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.726169][ T6027] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.832442][ T5983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.332551][ T6040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.646443][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.766961][ T5983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.985666][ T5983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.034389][ T6052] loop4: detected capacity change from 0 to 512 [ 119.055415][ T6052] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 119.096188][ T6051] loop2: detected capacity change from 0 to 128 [ 120.427523][ T5983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.230612][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.301340][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.315451][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.324248][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.333591][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.343790][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.526418][ T6076] loop4: detected capacity change from 0 to 256 [ 121.631079][ T6076] FAT-fs (loop4): Directory bread(block 64) failed [ 121.655944][ T6076] FAT-fs (loop4): Directory bread(block 65) failed [ 121.683114][ T6076] FAT-fs (loop4): Directory bread(block 66) failed [ 121.713493][ T6076] FAT-fs (loop4): Directory bread(block 67) failed [ 121.734428][ T6076] FAT-fs (loop4): Directory bread(block 68) failed [ 121.751767][ T6076] FAT-fs (loop4): Directory bread(block 69) failed [ 121.768400][ T6076] FAT-fs (loop4): Directory bread(block 70) failed [ 121.789328][ T6076] FAT-fs (loop4): Directory bread(block 71) failed [ 121.810036][ T6076] FAT-fs (loop4): Directory bread(block 72) failed [ 121.827671][ T6076] FAT-fs (loop4): Directory bread(block 73) failed [ 122.034866][ T5983] bridge_slave_1: left allmulticast mode [ 122.041075][ T5983] bridge_slave_1: left promiscuous mode [ 122.071536][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.298392][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.44'. [ 122.372847][ T5983] bridge_slave_0: left allmulticast mode [ 122.384965][ T5983] bridge_slave_0: left promiscuous mode [ 122.390799][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.423776][ T6082] loop0: detected capacity change from 0 to 512 [ 122.433327][ T6082] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 122.442921][ T6082] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 122.616250][ T6060] loop3: detected capacity change from 0 to 40427 [ 122.627917][ T6060] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 122.652950][ T6060] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.700905][ T6060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.789131][ T6060] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.827346][ T6089] loop2: detected capacity change from 0 to 512 [ 122.861125][ T6089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.880673][ T6060] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.892259][ T6060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.016158][ T6089] EXT4-fs (loop2): orphan cleanup on readonly fs [ 123.083568][ T6089] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 123.100878][ T6089] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 123.110693][ T6089] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.45: Failed to acquire dquot type 1 [ 123.134881][ T6089] EXT4-fs (loop2): 1 truncate cleaned up [ 123.159086][ T6089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.236403][ T6089] EXT4-fs (loop2): shut down requested (1) [ 123.303091][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.406150][ T5839] Bluetooth: hci0: command tx timeout [ 123.450106][ T6097] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 123.679543][ T6100] loop0: detected capacity change from 0 to 512 [ 123.724880][ T6100] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 123.741354][ T6100] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 125.489254][ T5839] Bluetooth: hci0: command tx timeout [ 125.830015][ T6105] loop2: detected capacity change from 0 to 2048 [ 125.837375][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.871420][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.900221][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.957512][ T5983] bond0 (unregistering): Released all slaves [ 126.830301][ T6126] loop4: detected capacity change from 0 to 256 [ 127.290012][ T6128] netlink: 292 bytes leftover after parsing attributes in process `syz.2.49'. [ 127.605060][ T5839] Bluetooth: hci0: command tx timeout [ 128.122393][ T6126] FAT-fs (loop4): Directory bread(block 64) failed [ 128.129176][ T6126] FAT-fs (loop4): Directory bread(block 65) failed [ 128.136349][ T6126] FAT-fs (loop4): Directory bread(block 66) failed [ 128.142974][ T6126] FAT-fs (loop4): Directory bread(block 67) failed [ 128.151046][ T6126] FAT-fs (loop4): Directory bread(block 68) failed [ 128.158321][ T6126] FAT-fs (loop4): Directory bread(block 69) failed [ 128.165660][ T6126] FAT-fs (loop4): Directory bread(block 70) failed [ 128.172383][ T6126] FAT-fs (loop4): Directory bread(block 71) failed [ 128.179629][ T6126] FAT-fs (loop4): Directory bread(block 72) failed [ 128.186333][ T6126] FAT-fs (loop4): Directory bread(block 73) failed [ 128.957212][ T6135] loop3: detected capacity change from 0 to 128 [ 129.125665][ T6135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.292913][ T6135] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.593028][ T6143] loop0: detected capacity change from 0 to 512 [ 129.647603][ T5839] Bluetooth: hci0: command tx timeout [ 129.730560][ T6143] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 129.781572][ T6071] chnl_net:caif_netlink_parms(): no params data found [ 129.838788][ T5835] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.241469][ T6152] loop3: detected capacity change from 0 to 512 [ 130.505435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.746152][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.762753][ T6152] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.952069][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.994549][ T5983] hsr_slave_0: left promiscuous mode [ 131.005100][ T5983] hsr_slave_1: left promiscuous mode [ 131.020535][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.261936][ T6165] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 131.736053][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.848313][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.891956][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.901419][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.014511][ T5983] veth1_macvtap: left promiscuous mode [ 132.028103][ T5983] veth0_macvtap: left promiscuous mode [ 132.044151][ T5983] veth1_vlan: left promiscuous mode [ 132.073547][ T5983] veth0_vlan: left promiscuous mode [ 132.112498][ T6171] loop2: detected capacity change from 0 to 2048 [ 132.200758][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.313794][ T6171] EXT4-fs (loop2): shut down requested (2) [ 132.542763][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.178820][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185572][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.607540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.312583][ T6188] loop0: detected capacity change from 0 to 128 [ 135.179781][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 135.264791][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 135.441443][ T6190] loop2: detected capacity change from 0 to 40427 [ 135.459626][ T6190] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 135.495568][ T6190] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 135.531978][ T6190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.617076][ T6190] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 135.626282][ T6190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.028588][ T6196] syz.2.67: attempt to access beyond end of device [ 136.028588][ T6196] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 138.425790][ T5836] syz-executor: attempt to access beyond end of device [ 138.425790][ T5836] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 138.442011][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 138.442035][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.442049][ T5836] Call Trace: [ 138.442057][ T5836] [ 138.442065][ T5836] dump_stack_lvl+0x241/0x360 [ 138.442110][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.442133][ T5836] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.442159][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 138.442189][ T5836] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 138.442226][ T5836] f2fs_handle_critical_error+0x38f/0x5a0 [ 138.442267][ T5836] f2fs_write_end_io+0x674/0x9a0 [ 138.442308][ T5836] __submit_merged_bio+0x2a9/0x710 [ 138.442347][ T5836] f2fs_submit_merged_write_cond+0x28a/0x360 [ 138.442393][ T5836] f2fs_write_data_pages+0x2c5e/0x3670 [ 138.442483][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.442664][ T5836] ? __pfx_lock_release+0x10/0x10 [ 138.442687][ T5836] ? do_raw_spin_lock+0x14f/0x370 [ 138.442718][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.442741][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.442771][ T5836] do_writepages+0x35f/0x880 [ 138.442812][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 138.442847][ T5836] ? filemap_fdatawrite+0x1e8/0x2a0 [ 138.442866][ T5836] ? do_raw_spin_lock+0x14f/0x370 [ 138.442887][ T5836] ? __pfx_lock_release+0x10/0x10 [ 138.442930][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.442954][ T5836] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 138.442991][ T5836] filemap_fdatawrite+0x1f3/0x2a0 [ 138.443020][ T5836] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 138.443124][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.443163][ T5836] f2fs_sync_dirty_inodes+0x348/0x860 [ 138.443212][ T5836] f2fs_write_checkpoint+0x8af/0x1de0 [ 138.443277][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 138.443386][ T5836] ? kill_f2fs_super+0x28e/0x6d0 [ 138.443416][ T5836] kill_f2fs_super+0x2b6/0x6d0 [ 138.443449][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 138.443484][ T5836] ? shrinker_free+0x2ca/0x3d0 [ 138.443508][ T5836] deactivate_locked_super+0xc4/0x130 [ 138.443534][ T5836] cleanup_mnt+0x41f/0x4b0 [ 138.443556][ T5836] ? lockdep_hardirqs_on+0x99/0x150 [ 138.443580][ T5836] task_work_run+0x24f/0x310 [ 138.443613][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 138.443634][ T5836] ? __x64_sys_umount+0x120/0x170 [ 138.443665][ T5836] ? syscall_exit_to_user_mode+0xa3/0x340 [ 138.443690][ T5836] syscall_exit_to_user_mode+0x13f/0x340 [ 138.443716][ T5836] do_syscall_64+0x100/0x230 [ 138.443736][ T5836] ? clear_bhb_loop+0x35/0x90 [ 138.443765][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.443785][ T5836] RIP: 0033:0x7f933b98e117 [ 138.443811][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 138.443824][ T5836] RSP: 002b:00007fff4f199a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 138.443842][ T5836] RAX: 0000000000000000 RBX: 00007f933ba0e08c RCX: 00007f933b98e117 [ 138.443853][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4f199b30 [ 138.443863][ T5836] RBP: 00007fff4f199b30 R08: 0000000000000000 R09: 0000000000000000 [ 138.443873][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4f19abc0 [ 138.443884][ T5836] R13: 00007f933ba0e08c R14: 000000000002148c R15: 00007fff4f19ac00 [ 138.443929][ T5836] [ 138.443936][ T5836] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 138.746468][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.753164][ T836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.755768][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.810391][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 138.810415][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.810425][ T5836] Call Trace: [ 138.810432][ T5836] [ 138.810439][ T5836] dump_stack_lvl+0x241/0x360 [ 138.810470][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.810491][ T5836] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.810515][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 138.810544][ T5836] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 138.810580][ T5836] f2fs_handle_critical_error+0x38f/0x5a0 [ 138.810618][ T5836] f2fs_write_end_io+0x674/0x9a0 [ 138.810656][ T5836] __submit_merged_bio+0x2a9/0x710 [ 138.810691][ T5836] f2fs_submit_merged_write_cond+0x28a/0x360 [ 138.810734][ T5836] f2fs_write_data_pages+0x2c5e/0x3670 [ 138.810818][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.810986][ T5836] ? __pfx_lock_release+0x10/0x10 [ 138.811007][ T5836] ? do_raw_spin_lock+0x14f/0x370 [ 138.811044][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.811072][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 138.811100][ T5836] do_writepages+0x35f/0x880 [ 138.811139][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 138.811172][ T5836] ? filemap_fdatawrite+0x1e8/0x2a0 [ 138.811190][ T5836] ? do_raw_spin_lock+0x14f/0x370 [ 138.811211][ T5836] ? __pfx_lock_release+0x10/0x10 [ 138.811251][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.811273][ T5836] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 138.811308][ T5836] filemap_fdatawrite+0x1f3/0x2a0 [ 138.811336][ T5836] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 138.811432][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 138.811468][ T5836] f2fs_sync_dirty_inodes+0x348/0x860 [ 138.811514][ T5836] f2fs_write_checkpoint+0x8af/0x1de0 [ 138.811574][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 138.811670][ T5836] ? kill_f2fs_super+0x28e/0x6d0 [ 138.811696][ T5836] kill_f2fs_super+0x2b6/0x6d0 [ 138.811723][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 138.811754][ T5836] ? shrinker_free+0x2ca/0x3d0 [ 138.811776][ T5836] deactivate_locked_super+0xc4/0x130 [ 138.811799][ T5836] cleanup_mnt+0x41f/0x4b0 [ 138.811820][ T5836] ? lockdep_hardirqs_on+0x99/0x150 [ 138.811842][ T5836] task_work_run+0x24f/0x310 [ 138.811874][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 138.811895][ T5836] ? __x64_sys_umount+0x120/0x170 [ 138.811924][ T5836] ? syscall_exit_to_user_mode+0xa3/0x340 [ 138.811946][ T5836] syscall_exit_to_user_mode+0x13f/0x340 [ 138.811969][ T5836] do_syscall_64+0x100/0x230 [ 138.811988][ T5836] ? clear_bhb_loop+0x35/0x90 [ 138.812016][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.812036][ T5836] RIP: 0033:0x7f933b98e117 [ 138.812053][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 138.812065][ T5836] RSP: 002b:00007fff4f199a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 138.812083][ T5836] RAX: 0000000000000000 RBX: 00007f933ba0e08c RCX: 00007f933b98e117 [ 138.812095][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4f199b30 [ 138.812104][ T5836] RBP: 00007fff4f199b30 R08: 0000000000000000 R09: 0000000000000000 [ 138.812114][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4f19abc0 [ 138.812125][ T5836] R13: 00007f933ba0e08c R14: 000000000002148c R15: 00007fff4f19ac00 [ 138.812167][ T5836] [ 138.812174][ T5836] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 138.931009][ T836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.941105][ T6071] bridge_slave_0: entered allmulticast mode [ 139.168384][ T836] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 139.201240][ T6071] bridge_slave_0: entered promiscuous mode [ 139.687054][ T836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 139.723675][ T836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.764805][ T836] usb 1-1: Product: syz [ 139.789199][ T836] usb 1-1: Manufacturer: syz [ 139.793844][ T836] usb 1-1: SerialNumber: syz [ 139.957231][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.964447][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.003326][ T6071] bridge_slave_1: entered allmulticast mode [ 140.026702][ T6071] bridge_slave_1: entered promiscuous mode [ 140.071826][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.110876][ T6226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.313506][ T6071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.392959][ T6071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.421632][ T6231] Zero length message leads to an empty skb [ 140.667344][ T6071] team0: Port device team_slave_0 added [ 140.698469][ T6071] team0: Port device team_slave_1 added [ 140.717775][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.819272][ T6237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.100470][ T836] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 141.314420][ T836] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 141.383073][ T836] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 141.418617][ T836] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 141.453266][ T836] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 141.475679][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.482775][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.487040][ T836] wwan wwan0: port wwan0mbim0 attached [ 141.521323][ T6071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.559695][ T6071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.585865][ T6071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.696780][ T6071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.803833][ T836] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 141.995624][ T836] usb 1-1: USB disconnect, device number 2 [ 142.007862][ T836] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 142.473689][ T6247] loop4: detected capacity change from 0 to 32768 [ 142.489298][ T6247] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.79 (6247) [ 142.507973][ T6247] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 142.508131][ T6247] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 142.585173][ T6240] loop2: detected capacity change from 0 to 40427 [ 142.624796][ T6240] F2FS-fs (loop2): invalid crc value [ 142.651912][ T6240] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.734629][ T6247] BTRFS info (device loop4): rebuilding free space tree [ 142.782090][ T6247] BTRFS info (device loop4): disabling free space tree [ 142.790093][ T6247] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 142.801325][ T6247] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 142.866839][ T6071] hsr_slave_0: entered promiscuous mode [ 142.874192][ T836] wwan wwan0: port wwan0mbim0 disconnected [ 142.910221][ T6071] hsr_slave_1: entered promiscuous mode [ 142.930424][ T6240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.077725][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 143.089747][ T6071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.131473][ T6071] Cannot create hsr debugfs directory [ 143.835313][ T29] audit: type=1800 audit(1739716030.328:4): pid=6276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.79" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 143.876971][ T5836] syz-executor: attempt to access beyond end of device [ 143.876971][ T5836] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.144575][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 144.144602][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.144612][ T5836] Call Trace: [ 144.144620][ T5836] [ 144.144628][ T5836] dump_stack_lvl+0x241/0x360 [ 144.144659][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.144681][ T5836] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 144.144706][ T5836] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.144735][ T5836] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 144.144770][ T5836] f2fs_handle_critical_error+0x38f/0x5a0 [ 144.144808][ T5836] f2fs_write_end_io+0x674/0x9a0 [ 144.144847][ T5836] __submit_merged_bio+0x2a9/0x710 [ 144.144882][ T5836] f2fs_submit_merged_write_cond+0x28a/0x360 [ 144.144924][ T5836] f2fs_write_data_pages+0x2c5e/0x3670 [ 144.145004][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.145118][ T5836] ? mark_lock+0x9a/0x360 [ 144.145155][ T5836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.145189][ T5836] ? irqentry_exit+0x63/0x90 [ 144.145205][ T5836] ? lockdep_hardirqs_on+0x99/0x150 [ 144.145242][ T5836] ? do_writepages+0x351/0x880 [ 144.145268][ T5836] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 144.145301][ T5836] do_writepages+0x35f/0x880 [ 144.145344][ T5836] ? __pfx_do_writepages+0x10/0x10 [ 144.145377][ T5836] ? filemap_fdatawrite+0x1e8/0x2a0 [ 144.145396][ T5836] ? do_raw_spin_lock+0x14f/0x370 [ 144.145417][ T5836] ? __pfx_lock_release+0x10/0x10 [ 144.145457][ T5836] ? do_raw_spin_unlock+0x13c/0x8b0 [ 144.145480][ T5836] ? wbc_attach_and_unlock_inode+0x561/0x580 [ 144.145516][ T5836] filemap_fdatawrite+0x1f3/0x2a0 [ 144.145544][ T5836] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 144.145655][ T5836] f2fs_sync_dirty_inodes+0x348/0x860 [ 144.145700][ T5836] f2fs_write_checkpoint+0x8af/0x1de0 [ 144.145759][ T5836] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 144.145856][ T5836] ? kill_f2fs_super+0x28e/0x6d0 [ 144.145884][ T5836] kill_f2fs_super+0x2b6/0x6d0 [ 144.145915][ T5836] ? __pfx_kill_f2fs_super+0x10/0x10 [ 144.145948][ T5836] ? shrinker_free+0x2ca/0x3d0 [ 144.145970][ T5836] deactivate_locked_super+0xc4/0x130 [ 144.145995][ T5836] cleanup_mnt+0x41f/0x4b0 [ 144.146015][ T5836] ? lockdep_hardirqs_on+0x99/0x150 [ 144.146038][ T5836] task_work_run+0x24f/0x310 [ 144.146069][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 144.146084][ T5836] ? __x64_sys_umount+0x120/0x170 [ 144.146113][ T5836] ? syscall_exit_to_user_mode+0xa3/0x340 [ 144.146137][ T5836] syscall_exit_to_user_mode+0x13f/0x340 [ 144.146162][ T5836] do_syscall_64+0x100/0x230 [ 144.146181][ T5836] ? clear_bhb_loop+0x35/0x90 [ 144.146208][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.146229][ T5836] RIP: 0033:0x7f933b98e117 [ 144.146246][ T5836] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 144.146258][ T5836] RSP: 002b:00007fff4f199a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 144.146281][ T5836] RAX: 0000000000000000 RBX: 00007f933ba0e08c RCX: 00007f933b98e117 [ 144.146292][ T5836] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4f199b30 [ 144.146303][ T5836] RBP: 00007fff4f199b30 R08: 0000000000000000 R09: 0000000000000000 [ 144.146313][ T5836] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4f19abc0 [ 144.146324][ T5836] R13: 00007f933ba0e08c R14: 0000000000022f03 R15: 00007fff4f19ac00 [ 144.146369][ T5836] [ 144.480567][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.656826][ T29] audit: type=1800 audit(1739716030.738:5): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.79" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 144.725154][ T5836] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 145.046146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 145.352366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 145.557169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 145.749805][ T6288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.762877][ T6288] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 146.376861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.470370][ T5837] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.685316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.947286][ T6292] sctp: failed to load transform for md5: -2 [ 148.082508][ T6311] loop0: detected capacity change from 0 to 512 [ 148.575798][ T6311] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 148.584693][ T6311] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 149.262531][ T6071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.069113][ T6071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.388412][ T6071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.494048][ T6327] loop4: detected capacity change from 0 to 512 [ 150.553360][ T6071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.583355][ T6327] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.785593][ T6325] loop2: detected capacity change from 0 to 32768 [ 150.828863][ T6325] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.82 (6325) [ 150.873155][ T6325] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.885525][ T6325] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 150.951908][ T6331] loop0: detected capacity change from 0 to 512 [ 150.966320][ T6331] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 150.978634][ T6331] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 151.597504][ T6325] BTRFS info (device loop2): rebuilding free space tree [ 151.623240][ T6325] BTRFS info (device loop2): disabling free space tree [ 151.630458][ T6325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.640225][ T6325] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 152.595193][ T29] audit: type=1800 audit(1739716039.128:6): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 152.987648][ T29] audit: type=1800 audit(1739716039.208:7): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.82" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 153.124737][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 153.254131][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.264325][ T5836] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.343864][ T6071] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.414224][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.422474][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.536710][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.543959][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.125637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 157.160078][ T6382] tmpfs: Bad value for 'nr_blocks' [ 157.448101][ T6071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.525420][ T6395] loop4: detected capacity change from 0 to 512 [ 157.539053][ T6395] EXT4-fs: Mount option(s) incompatible with ext2 [ 158.469591][ T6401] loop2: detected capacity change from 0 to 512 [ 158.489690][ T6401] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 158.500963][ T6401] EXT4-fs (loop2): failed to open journal device unknown-block(7,4171) -6 [ 158.625394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 158.633993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 159.755055][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 160.105163][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 160.614276][ T5887] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.641443][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.660588][ T5887] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.703464][ T5887] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.774754][ T5887] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.815530][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.070687][ T6071] veth0_vlan: entered promiscuous mode [ 161.150094][ T6071] veth1_vlan: entered promiscuous mode [ 161.191360][ T5887] usb 3-1: usb_control_msg returned -32 [ 161.222176][ T5887] usbtmc 3-1:16.0: can't read capabilities [ 162.622374][ T6071] veth0_macvtap: entered promiscuous mode [ 162.750983][ T6071] veth1_macvtap: entered promiscuous mode [ 162.764355][ T6433] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 162.777743][ T23] usb 3-1: USB disconnect, device number 2 [ 162.914167][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.953309][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.059995][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.114531][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.210540][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.278348][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.319956][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.390381][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.617052][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.099739][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.147572][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.171666][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.204354][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.240743][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.281689][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.310157][ T6071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.340907][ T6071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.375884][ T6071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.570104][ T6071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.596552][ T6071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.973780][ T6071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.982733][ T6071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.203452][ T6462] loop0: detected capacity change from 0 to 512 [ 165.269359][ T6462] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 165.278258][ T6462] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 167.466627][ T6466] loop4: detected capacity change from 0 to 512 [ 168.205113][ T6466] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 168.213868][ T6466] EXT4-fs (loop4): failed to open journal device unknown-block(7,4171) -6 [ 170.148099][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.162527][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.118138][ T6494] loop2: detected capacity change from 0 to 512 [ 172.225005][ T6494] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 172.233867][ T6494] EXT4-fs (loop2): failed to open journal device unknown-block(7,4171) -6 [ 173.936349][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.953742][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.548806][ T6502] loop4: detected capacity change from 0 to 32768 [ 174.565639][ T6502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.124 (6502) [ 174.592463][ T6502] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.602731][ T6502] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 174.962779][ T6505] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 175.458119][ T6502] BTRFS info (device loop4): rebuilding free space tree [ 175.917259][ T6502] BTRFS info (device loop4): disabling free space tree [ 175.924231][ T6502] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.933974][ T6502] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.404523][ T6544] loop0: detected capacity change from 0 to 512 [ 177.267726][ T6544] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 177.276510][ T6544] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 177.768871][ T6548] syz.2.129 uses obsolete (PF_INET,SOCK_PACKET) [ 178.215365][ T5837] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.404611][ T6564] loop5: detected capacity change from 0 to 512 [ 180.226306][ T6564] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 180.235219][ T6564] EXT4-fs (loop5): failed to open journal device unknown-block(7,4171) -6 [ 181.297051][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 181.391404][ T6568] MTD: Couldn't look up 'memory.events': -15 [ 181.468949][ T6570] loop0: detected capacity change from 0 to 1024 [ 181.716837][ T6570] EXT4-fs: Ignoring removed orlov option [ 181.820340][ T6570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.490686][ T6570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.678897][ T6583] process 'syz.0.135' launched './file0/file0' with NULL argv: empty string added [ 183.622240][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.882323][ T6605] loop0: detected capacity change from 0 to 512 [ 186.300720][ T6605] EXT4-fs: Mount option(s) incompatible with ext2 [ 187.144096][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.143'. [ 187.306916][ T6614] loop5: detected capacity change from 0 to 128 [ 187.889820][ T6614] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.078492][ T6614] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.129173][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.306897][ T6645] loop0: detected capacity change from 0 to 8 [ 191.246493][ T6071] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.357485][ T6663] FAULT_INJECTION: forcing a failure. [ 191.357485][ T6663] name failslab, interval 1, probability 0, space 0, times 1 [ 191.387549][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.3.154 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 191.387587][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 191.387606][ T6663] Call Trace: [ 191.387613][ T6663] [ 191.387619][ T6663] dump_stack_lvl+0x241/0x360 [ 191.387660][ T6663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.387678][ T6663] ? __pfx__printk+0x10/0x10 [ 191.387700][ T6663] ? fs_reclaim_acquire+0x93/0x130 [ 191.387720][ T6663] ? __pfx___might_resched+0x10/0x10 [ 191.387739][ T6663] ? lockdep_init_map_type+0xa1/0x910 [ 191.387770][ T6663] should_fail_ex+0x40a/0x550 [ 191.387800][ T6663] should_failslab+0xac/0x100 [ 191.387825][ T6663] ? security_inode_alloc+0x37/0x310 [ 191.387846][ T6663] kmem_cache_alloc_noprof+0x70/0x380 [ 191.387884][ T6663] security_inode_alloc+0x37/0x310 [ 191.387908][ T6663] inode_init_always_gfp+0xa0f/0xd90 [ 191.387937][ T6663] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 191.387962][ T6663] alloc_inode+0xa3/0x1b0 [ 191.387987][ T6663] new_inode+0x22/0x1d0 [ 191.388018][ T6663] shmem_get_inode+0x39d/0xf20 [ 191.388036][ T6663] ? _raw_spin_unlock+0x28/0x50 [ 191.388056][ T6663] ? alloc_fd+0x61a/0x690 [ 191.388089][ T6663] __shmem_file_setup+0x171/0x2c0 [ 191.388113][ T6663] __se_sys_memfd_create+0x328/0x7d0 [ 191.388144][ T6663] do_syscall_64+0xf3/0x230 [ 191.388162][ T6663] ? clear_bhb_loop+0x35/0x90 [ 191.388188][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.388207][ T6663] RIP: 0033:0x7efd2f38cde9 [ 191.388227][ T6663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.388239][ T6663] RSP: 002b:00007efd30183e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 191.388261][ T6663] RAX: ffffffffffffffda RBX: 0000000000005505 RCX: 00007efd2f38cde9 [ 191.388272][ T6663] RDX: 00007efd30183ef0 RSI: 0000000000000000 RDI: 00007efd2f40ec51 [ 191.388283][ T6663] RBP: 0000400000002480 R08: 00007efd30183bb7 R09: 00007efd30183e40 [ 191.388294][ T6663] R10: 000000000000000a R11: 0000000000000202 R12: 00004000000000c0 [ 191.388304][ T6663] R13: 00007efd30183ef0 R14: 00007efd30183eb0 R15: 0000400000000480 [ 191.388339][ T6663] [ 191.610006][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.966174][ T6672] loop4: detected capacity change from 0 to 1764 [ 191.989653][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 192.056549][ T6672] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.210347][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.228882][ T23] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 192.257945][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 192.259188][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.153'. [ 192.275426][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.293948][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 192.296464][ T875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.322216][ T23] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 192.336094][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.356998][ T23] usb 3-1: Product: syz [ 192.361237][ T23] usb 3-1: Manufacturer: syz [ 192.367269][ T51] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 192.386608][ T23] usb 3-1: SerialNumber: syz [ 192.475247][ T875] usb 1-1: Using ep0 maxpacket: 32 [ 192.475837][ T23] usb 3-1: config 0 descriptor?? [ 192.497094][ T875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 43739, setting to 1024 [ 192.505932][ T23] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 192.518709][ T875] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 192.532256][ T23] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 192.540757][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 192.560942][ T51] usb 5-1: config 0 has an invalid interface number: 223 but max is 0 [ 192.575085][ T51] usb 5-1: config 0 has no interface number 0 [ 192.601704][ T51] usb 5-1: config 0 interface 223 altsetting 1 has an endpoint descriptor with address 0x54, changing to 0x4 [ 192.607162][ T875] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 192.613533][ T23] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 192.661125][ T875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.661957][ T51] usb 5-1: config 0 interface 223 altsetting 1 endpoint 0x4 has an invalid bInterval 218, changing to 11 [ 192.706025][ T875] usb 1-1: Product: syz [ 192.710247][ T875] usb 1-1: Manufacturer: syz [ 192.754278][ T875] usb 1-1: SerialNumber: syz [ 192.761750][ T51] usb 5-1: config 0 interface 223 altsetting 1 endpoint 0x4 has invalid maxpacket 59063, setting to 1024 [ 192.815709][ T23] usb 3-1: USB disconnect, device number 3 [ 192.818281][ T875] usb 1-1: config 0 descriptor?? [ 192.836040][ T51] usb 5-1: config 0 interface 223 has no altsetting 0 [ 192.868757][ T23] garmin_gps 3-1:0.0: device disconnected [ 192.870265][ T875] usb 1-1: can't set config #0, error -71 [ 192.889272][ T51] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 192.955046][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.958935][ T875] usb 1-1: USB disconnect, device number 3 [ 192.963097][ T51] usb 5-1: Product: syz [ 193.025474][ T51] usb 5-1: Manufacturer: syz [ 193.031316][ T51] usb 5-1: SerialNumber: syz [ 193.135184][ T51] usb 5-1: config 0 descriptor?? [ 193.156189][ T6672] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 193.536700][ T875] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.647602][ T6668] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 194.381393][ T51] usb 5-1: USB disconnect, device number 2 [ 194.424784][ T875] usb 1-1: device descriptor read/64, error -71 [ 194.615570][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.622833][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.711367][ T875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 194.868589][ T875] usb 1-1: device descriptor read/64, error -71 [ 194.994013][ T875] usb usb1-port1: attempt power cycle [ 195.789168][ T6713] FAULT_INJECTION: forcing a failure. [ 195.789168][ T6713] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.802740][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.2.162 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 195.802761][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 195.802770][ T6713] Call Trace: [ 195.802776][ T6713] [ 195.802783][ T6713] dump_stack_lvl+0x241/0x360 [ 195.802807][ T6713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.802823][ T6713] ? __pfx__printk+0x10/0x10 [ 195.802846][ T6713] ? snprintf+0xda/0x120 [ 195.802871][ T6713] should_fail_ex+0x40a/0x550 [ 195.802900][ T6713] _copy_to_user+0x31/0xb0 [ 195.802925][ T6713] simple_read_from_buffer+0xdc/0x170 [ 195.802955][ T6713] proc_fail_nth_read+0x1e9/0x250 [ 195.802978][ T6713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.803001][ T6713] ? rw_verify_area+0x243/0x630 [ 195.803019][ T6713] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.803041][ T6713] vfs_read+0x1f8/0xb40 [ 195.803062][ T6713] ? fdget_pos+0x254/0x320 [ 195.803079][ T6713] ? __pfx___mutex_lock+0x10/0x10 [ 195.803097][ T6713] ? __pfx_vfs_read+0x10/0x10 [ 195.803111][ T6713] ? do_sys_openat2+0x179/0x1c0 [ 195.803140][ T6713] ? __fget_files+0x2a/0x410 [ 195.803167][ T6713] ? __fget_files+0x395/0x410 [ 195.803188][ T6713] ? __fget_files+0x2a/0x410 [ 195.803227][ T6713] ksys_read+0x18f/0x2b0 [ 195.803251][ T6713] ? __pfx_ksys_read+0x10/0x10 [ 195.803273][ T6713] ? do_syscall_64+0x100/0x230 [ 195.803296][ T6713] ? do_syscall_64+0xb6/0x230 [ 195.803319][ T6713] do_syscall_64+0xf3/0x230 [ 195.803337][ T6713] ? clear_bhb_loop+0x35/0x90 [ 195.803364][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.803390][ T6713] RIP: 0033:0x7f933b98b7fc [ 195.803406][ T6713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 195.803419][ T6713] RSP: 002b:00007f933c830030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.803437][ T6713] RAX: ffffffffffffffda RBX: 00007f933bba6080 RCX: 00007f933b98b7fc [ 195.803449][ T6713] RDX: 000000000000000f RSI: 00007f933c8300a0 RDI: 0000000000000007 [ 195.803459][ T6713] RBP: 00007f933c830090 R08: 0000000000000000 R09: 0000000000000000 [ 195.803469][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.803478][ T6713] R13: 0000000000000000 R14: 00007f933bba6080 R15: 00007fff4f19a7e8 [ 195.803517][ T6713] [ 196.030367][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.005310][ T875] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.035952][ T875] usb 1-1: device descriptor read/8, error -71 [ 197.171661][ T6716] loop4: detected capacity change from 0 to 1024 [ 197.326330][ T875] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 197.422535][ T6716] hfsplus: bad catalog file entry [ 197.429722][ T6716] hfsplus: failed to load root directory [ 198.336351][ T875] usb 1-1: device descriptor read/8, error -71 [ 198.455566][ T875] usb usb1-port1: unable to enumerate USB device [ 198.615501][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 198.675188][ T6724] bond0: option resend_igmp: invalid value (7540) [ 198.725948][ T6727] capability: warning: `syz.0.167' uses deprecated v2 capabilities in a way that may be insecure [ 198.743196][ T6724] bond0: option resend_igmp: allowed values 0 - 255 [ 198.891727][ T6727] loop0: detected capacity change from 0 to 256 [ 199.008369][ T6724] loop4: detected capacity change from 0 to 256 [ 199.022577][ T6724] loop4: detected capacity change from 0 to 8 [ 199.259437][ T875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 199.362299][ T6738] loop5: detected capacity change from 0 to 512 [ 199.485898][ T875] usb 4-1: Using ep0 maxpacket: 8 [ 199.525922][ T6738] EXT4-fs: Ignoring removed oldalloc option [ 199.538485][ T875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 199.858819][ T875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 199.864969][ T6738] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.139944][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 200.155321][ T6738] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 200.229321][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 200.229328][ T6738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 200.229440][ T6738] System zones: [ 200.274450][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 200.329106][ T875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9C, changing to 0x8C [ 200.331540][ T6748] loop4: detected capacity change from 0 to 2048 [ 200.393869][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 200.414109][ T6738] 0-2, 18-18, 34-34 [ 200.467457][ T6738] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 200.508010][ T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 200.524393][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.628109][ T6748] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.634684][ T6748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.657939][ T875] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 200.687573][ T6738] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.168: bad orphan inode 15 [ 200.704994][ T875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.717844][ T6748] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 200.734981][ T875] usb 4-1: Product: syz [ 200.753677][ T875] usb 4-1: Manufacturer: syz [ 201.037619][ T875] usb 4-1: SerialNumber: syz [ 201.044502][ T6748] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 201.199936][ T6757] netlink: 112 bytes leftover after parsing attributes in process `syz.0.172'. [ 201.210398][ T6738] ext4_test_bit(bit=14, block=18) = 1 [ 201.225924][ T875] usb 4-1: config 0 descriptor?? [ 201.296905][ T6738] is_bad_inode(inode)=0 [ 201.384086][ T6758] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.400583][ T6758] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 4 with error 28 [ 201.413035][ T6758] EXT4-fs (loop4): This should not happen!! Data will be lost [ 201.413035][ T6758] [ 201.422827][ T6758] EXT4-fs (loop4): Total free blocks count 0 [ 201.429186][ T6758] EXT4-fs (loop4): Free/Dirty block details [ 201.446358][ T6758] EXT4-fs (loop4): free_blocks=2415919104 [ 201.452122][ T6758] EXT4-fs (loop4): dirty_blocks=32 [ 201.466988][ T6758] EXT4-fs (loop4): Block reservation details [ 201.475211][ T6758] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 201.848788][ T875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.870658][ T29] audit: type=1800 audit(1739716088.018:8): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.171" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 201.954886][ T875] usb 4-1: USB disconnect, device number 2 [ 201.963136][ T6738] NEXT_ORPHAN(inode)=2264924160 [ 202.009412][ T6738] max_ino=32 [ 202.073376][ T6738] i_nlink=0 [ 202.124639][ T6738] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 202.217205][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.234519][ T6738] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.168: bg 0: block 80: padding at end of block bitmap is not set [ 202.437070][ T6738] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 202.538968][ T6738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.598944][ T5837] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /34/file1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=2048 fake=0 [ 202.623620][ T6773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.915372][ T6785] FAULT_INJECTION: forcing a failure. [ 202.915372][ T6785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.928824][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: syz.0.178 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 202.928838][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.928843][ T6785] Call Trace: [ 202.928847][ T6785] [ 202.928852][ T6785] dump_stack_lvl+0x241/0x360 [ 202.928870][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.928881][ T6785] ? __pfx__printk+0x10/0x10 [ 202.928893][ T6785] ? shmem_allowable_huge_orders+0x200/0x430 [ 202.928913][ T6785] should_fail_ex+0x40a/0x550 [ 202.928931][ T6785] copy_page_from_iter_atomic+0x301/0x1e60 [ 202.928951][ T6785] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 202.928973][ T6785] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 202.928983][ T6785] ? shmem_write_begin+0x1e9/0x350 [ 202.928996][ T6785] ? __pfx_shmem_write_begin+0x10/0x10 [ 202.929012][ T6785] ? fault_in_iov_iter_readable+0x229/0x280 [ 202.929026][ T6785] generic_perform_write+0x675/0x990 [ 202.929048][ T6785] ? __pfx_generic_perform_write+0x10/0x10 [ 202.929056][ T6785] ? _raw_spin_unlock+0x28/0x50 [ 202.929069][ T6785] ? __mark_inode_dirty+0x5b2/0xe90 [ 202.929078][ T6785] ? preempt_count_add+0x93/0x190 [ 202.929091][ T6785] ? mnt_put_write_access_file+0xb8/0x100 [ 202.929104][ T6785] ? file_update_time+0x3dd/0x450 [ 202.929119][ T6785] shmem_file_write_iter+0xf9/0x120 [ 202.929132][ T6785] vfs_write+0xacf/0xd10 [ 202.929148][ T6785] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 202.929161][ T6785] ? __pfx_vfs_write+0x10/0x10 [ 202.929175][ T6785] ? __fget_files+0x2a/0x410 [ 202.929192][ T6785] ? __fget_files+0x2a/0x410 [ 202.929213][ T6785] ksys_write+0x18f/0x2b0 [ 202.929227][ T6785] ? __pfx_ksys_write+0x10/0x10 [ 202.929238][ T6785] ? exc_page_fault+0x590/0x8b0 [ 202.929255][ T6785] ? do_syscall_64+0xb6/0x230 [ 202.929267][ T6785] do_syscall_64+0xf3/0x230 [ 202.929277][ T6785] ? clear_bhb_loop+0x35/0x90 [ 202.929293][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.929304][ T6785] RIP: 0033:0x7fa825f8b89f [ 202.929315][ T6785] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 202.929322][ T6785] RSP: 002b:00007fa826d94df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.929332][ T6785] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007fa825f8b89f [ 202.929339][ T6785] RDX: 0000000000020000 RSI: 00007fa81b800000 RDI: 000000000000000a [ 202.929344][ T6785] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000276 [ 202.929350][ T6785] R10: 00000000000003ce R11: 0000000000000293 R12: 000000000000000a [ 202.929355][ T6785] R13: 00007fa826d94ef0 R14: 00007fa826d94eb0 R15: 00007fa81b800000 [ 202.929375][ T6785] [ 202.931054][ T6785] loop0: detected capacity change from 0 to 256 [ 203.227985][ T6785] FAT-fs (loop0): Directory bread(block 1285) failed [ 203.234779][ T6785] FAT-fs (loop0): Directory bread(block 1286) failed [ 203.241590][ T6785] FAT-fs (loop0): Directory bread(block 1287) failed [ 203.248594][ T6785] FAT-fs (loop0): Directory bread(block 1288) failed [ 203.255308][ T6785] FAT-fs (loop0): Directory bread(block 1289) failed [ 203.262048][ T6785] FAT-fs (loop0): Directory bread(block 1290) failed [ 203.268751][ T6785] FAT-fs (loop0): Directory bread(block 1291) failed [ 203.275539][ T6785] FAT-fs (loop0): Directory bread(block 1292) failed [ 203.282205][ T6785] FAT-fs (loop0): Directory bread(block 1293) failed [ 203.288971][ T6785] FAT-fs (loop0): Directory bread(block 1294) failed [ 204.049738][ T6791] loop0: detected capacity change from 0 to 512 [ 204.137794][ T6791] EXT4-fs: Mount option(s) incompatible with ext2 [ 205.169642][ T6800] loop0: detected capacity change from 0 to 32768 [ 205.191184][ T6800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.181 (6800) [ 205.219973][ T6800] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.230256][ T6800] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 205.381174][ T6800] BTRFS info (device loop0): rebuilding free space tree [ 205.413824][ T6800] BTRFS info (device loop0): disabling free space tree [ 205.421668][ T6800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 205.431468][ T6800] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 205.884103][ T29] audit: type=1800 audit(1739716092.518:9): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 206.308677][ T29] audit: type=1800 audit(1739716092.638:10): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 206.501150][ T6071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.513174][ T5841] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.180955][ T6831] syzkaller0: entered promiscuous mode [ 207.191712][ T6844] loop5: detected capacity change from 0 to 16 [ 207.231690][ T6831] syzkaller0: entered allmulticast mode [ 207.247865][ T6844] erofs (device loop5): mounted with root inode @ nid 36. [ 207.555328][ T6854] loop0: detected capacity change from 0 to 512 [ 207.903680][ T6854] EXT4-fs: Mount option(s) incompatible with ext2 [ 211.568343][ T6882] loop0: detected capacity change from 0 to 512 [ 211.575743][ T6882] EXT4-fs: Ignoring removed oldalloc option [ 211.588403][ T6882] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.659882][ T6882] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 211.671268][ T6882] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 211.679526][ T6882] System zones: 0-2, 18-18, 34-34 [ 211.699345][ T6882] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 211.714884][ T6882] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.196: bad orphan inode 15 [ 211.730963][ T6882] ext4_test_bit(bit=14, block=18) = 1 [ 211.736505][ T6882] is_bad_inode(inode)=0 [ 211.740675][ T6882] NEXT_ORPHAN(inode)=2264924160 [ 211.745797][ T6882] max_ino=32 [ 211.749009][ T6882] i_nlink=0 [ 211.752187][ T6882] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.778456][ T6887] futex_wake_op: syz.4.197 tries to shift op by 32; fix this program [ 211.811501][ T6882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.196: bg 0: block 80: padding at end of block bitmap is not set [ 211.832734][ T6882] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 211.843352][ T6889] loop2: detected capacity change from 0 to 1024 [ 211.847496][ T6882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.276581][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 212.282912][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 212.290475][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 212.364094][ T5838] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.513712][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.580460][ T6889] hfsplus: Unknown parameter 'permit_directio' [ 212.700865][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.700912][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.700960][ T5838] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 212.700985][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.706586][ T5838] usb 5-1: config 0 descriptor?? [ 213.206228][ T6906] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 213.218508][ T6907] loop0: detected capacity change from 0 to 2048 [ 213.242769][ T6907] NILFS (loop0): couldn't find nilfs on the device [ 213.263141][ T6906] overlayfs: workdir and upperdir must be separate subtrees [ 213.273954][ T6907] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 213.339165][ T6910] futex_wake_op: syz.2.203 tries to shift op by 32; fix this program [ 213.426530][ T6901] loop5: detected capacity change from 0 to 8192 [ 214.351214][ T6907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.051294][ T6901] loop5: p1 p4 [ 215.051294][ T6901] p1: [ 215.164054][ T6901] loop5: p4 start 201785344 is beyond EOD, truncated [ 215.249107][ T6919] loop2: detected capacity change from 0 to 256 [ 215.323539][ T6919] exfat: Deprecated parameter 'namecase' [ 215.340944][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 215.355852][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 215.382036][ T6919] exfat: Deprecated parameter 'namecase' [ 215.405877][ T5838] usb 5-1: USB disconnect, device number 3 [ 215.482389][ T6919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 215.869758][ T6928] loop0: detected capacity change from 0 to 32768 [ 216.035272][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.059737][ T6928] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 216.074444][ T6928] bcachefs (loop0): initializing new filesystem [ 216.093121][ T6928] bcachefs (loop0): going read-write [ 216.105373][ T6928] bcachefs (loop0): marking superblocks [ 216.127355][ T6928] bcachefs (loop0): initializing freespace [ 216.134514][ T6928] bcachefs (loop0): done initializing freespace [ 216.144682][ T6928] bcachefs (loop0): reading snapshots table [ 216.150680][ T6928] bcachefs (loop0): reading snapshots done [ 216.226417][ T6928] bcachefs (loop0): done starting filesystem [ 216.378255][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.458923][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.512253][ T23] usb 4-1: config 1 has no interface number 0 [ 216.547018][ T23] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.587751][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.600042][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.632710][ T23] usb 4-1: Product: syz [ 216.701341][ T23] usb 4-1: Manufacturer: syz [ 216.795062][ T23] usb 4-1: SerialNumber: syz [ 216.848865][ T23] usb 4-1: selecting invalid altsetting 1 [ 217.229152][ T6957] loop2: detected capacity change from 0 to 32768 [ 217.252152][ T6957] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.211 (6957) [ 217.274673][ T6957] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.285039][ T6957] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 218.221489][ T6957] BTRFS info (device loop2): rebuilding free space tree [ 218.248681][ T6957] BTRFS info (device loop2): disabling free space tree [ 218.255763][ T6957] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 218.265697][ T6957] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 218.488341][ T6926] syz.0.207 (6926) used greatest stack depth: 13152 bytes left [ 218.496554][ T6928] syz.0.207 (6928) used greatest stack depth: 12368 bytes left [ 218.572582][ T6949] loop4: detected capacity change from 0 to 32768 [ 218.918037][ T29] audit: type=1800 audit(1739716105.538:11): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.211" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 219.211725][ T29] audit: type=1800 audit(1739716105.658:12): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.211" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 219.340628][ T6949] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 219.394228][ T6949] ================================================================== [ 219.402344][ T6949] BUG: KASAN: use-after-free in ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 219.410353][ T6949] Read of size 2 at addr ffff88804f0818c9 by task syz.4.210/6949 [ 219.418076][ T6949] [ 219.420404][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.4.210 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 219.420424][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 219.420434][ T6949] Call Trace: [ 219.420441][ T6949] [ 219.420448][ T6949] dump_stack_lvl+0x241/0x360 [ 219.420473][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.420492][ T6949] ? __pfx__printk+0x10/0x10 [ 219.420511][ T6949] ? __virt_addr_valid+0x183/0x530 [ 219.420527][ T6949] ? __virt_addr_valid+0x183/0x530 [ 219.420545][ T6949] print_report+0x16b/0x5a0 [ 219.420568][ T6949] ? __virt_addr_valid+0x183/0x530 [ 219.420584][ T6949] ? __virt_addr_valid+0x183/0x530 [ 219.420599][ T6949] ? __virt_addr_valid+0x45f/0x530 [ 219.420614][ T6949] ? __phys_addr+0xba/0x170 [ 219.420631][ T6949] ? ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 219.420653][ T6949] kasan_report+0x143/0x180 [ 219.420676][ T6949] ? ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 219.420701][ T6949] ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 219.420724][ T6949] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.420768][ T6949] ? _raw_spin_unlock+0x28/0x50 [ 219.420794][ T6949] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10 [ 219.420816][ T6949] ? ocfs2_inode_lock_atime+0x25f/0x5b0 [ 219.420838][ T6949] ? __pfx_ocfs2_inode_lock_atime+0x10/0x10 [ 219.420859][ T6949] ? __pfx___might_resched+0x10/0x10 [ 219.420887][ T6949] ocfs2_readdir+0x2a1/0x5e0 [ 219.420909][ T6949] ? __pfx_ocfs2_readdir+0x10/0x10 [ 219.420927][ T6949] ? down_write+0x18c/0x220 [ 219.420944][ T6949] ? __pfx_down_write+0x10/0x10 [ 219.420962][ T6949] ? __x64_sys_lseek+0x180/0x1e0 [ 219.420984][ T6949] ? __pfx_ocfs2_readdir+0x10/0x10 [ 219.421004][ T6949] wrap_directory_iterator+0x91/0xd0 [ 219.421025][ T6949] iterate_dir+0x5a9/0x760 [ 219.421048][ T6949] __se_sys_getdents+0x1fd/0x4e0 [ 219.421073][ T6949] ? __pfx___se_sys_getdents+0x10/0x10 [ 219.421092][ T6949] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.421115][ T6949] ? __pfx_filldir+0x10/0x10 [ 219.421135][ T6949] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.421166][ T6949] ? do_syscall_64+0x100/0x230 [ 219.421186][ T6949] ? do_syscall_64+0xb6/0x230 [ 219.421205][ T6949] do_syscall_64+0xf3/0x230 [ 219.421222][ T6949] ? clear_bhb_loop+0x35/0x90 [ 219.421247][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.421268][ T6949] RIP: 0033:0x7fbe8b38cde9 [ 219.421284][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.421297][ T6949] RSP: 002b:00007fbe8c257038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 219.421315][ T6949] RAX: ffffffffffffffda RBX: 00007fbe8b5a5fa0 RCX: 00007fbe8b38cde9 [ 219.421329][ T6949] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 219.421340][ T6949] RBP: 00007fbe8b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 219.421350][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.421361][ T6949] R13: 0000000000000000 R14: 00007fbe8b5a5fa0 R15: 00007ffe1f1a6e68 [ 219.421382][ T6949] [ 219.421388][ T6949] [ 219.717927][ T6949] The buggy address belongs to the physical page: [ 219.724327][ T6949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4f081 [ 219.733103][ T6949] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 219.740214][ T6949] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 219.748786][ T6949] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 219.757355][ T6949] page dumped because: kasan: bad access detected [ 219.763762][ T6949] page_owner tracks the page as freed [ 219.769117][ T6949] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 1, tgid 1 (swapper/0), ts 24472235949, free_ts 25402023456 [ 219.784126][ T6949] post_alloc_hook+0x1f4/0x240 [ 219.788882][ T6949] split_free_pages+0xe1/0x2d0 [ 219.793644][ T6949] alloc_contig_range_noprof+0x10eb/0x1770 [ 219.799445][ T6949] alloc_contig_pages_noprof+0x4b3/0x5c0 [ 219.805182][ T6949] debug_vm_pgtable_alloc_huge_page+0xaf/0x100 [ 219.811371][ T6949] init_args+0x83b/0xb20 [ 219.815615][ T6949] debug_vm_pgtable+0xe4/0x590 [ 219.820367][ T6949] do_one_initcall+0x248/0x930 [ 219.825126][ T6949] do_initcall_level+0x157/0x210 [ 219.830052][ T6949] do_initcalls+0x71/0xd0 [ 219.834387][ T6949] kernel_init_freeable+0x430/0x5d0 [ 219.839583][ T6949] kernel_init+0x1d/0x2b0 [ 219.843910][ T6949] ret_from_fork+0x4b/0x80 [ 219.848318][ T6949] ret_from_fork_asm+0x1a/0x30 [ 219.853088][ T6949] page last free pid 1 tgid 1 stack trace: [ 219.858875][ T6949] free_frozen_pages+0xe0d/0x10e0 [ 219.863887][ T6949] free_contig_range+0x14c/0x430 [ 219.868833][ T6949] destroy_args+0x94/0x4b0 [ 219.873258][ T6949] debug_vm_pgtable+0x551/0x590 [ 219.878110][ T6949] do_one_initcall+0x248/0x930 [ 219.882877][ T6949] do_initcall_level+0x157/0x210 [ 219.887822][ T6949] do_initcalls+0x71/0xd0 [ 219.892150][ T6949] kernel_init_freeable+0x430/0x5d0 [ 219.897348][ T6949] kernel_init+0x1d/0x2b0 [ 219.901705][ T6949] ret_from_fork+0x4b/0x80 [ 219.906129][ T6949] ret_from_fork_asm+0x1a/0x30 [ 219.910910][ T6949] [ 219.913223][ T6949] Memory state around the buggy address: [ 219.918848][ T6949] ffff88804f081780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 219.926909][ T6949] ffff88804f081800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 219.935086][ T6949] >ffff88804f081880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 219.943130][ T6949] ^ [ 219.949526][ T6949] ffff88804f081900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 219.957569][ T6949] ffff88804f081980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 219.965614][ T6949] ================================================================== [ 220.054480][ T6949] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.061729][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.4.210 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 220.072241][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.082288][ T6949] Call Trace: [ 220.085559][ T6949] [ 220.088487][ T6949] dump_stack_lvl+0x241/0x360 [ 220.093161][ T6949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.098355][ T6949] ? __pfx__printk+0x10/0x10 [ 220.102933][ T6949] ? preempt_schedule+0xe1/0xf0 [ 220.107781][ T6949] ? vscnprintf+0x5d/0x90 [ 220.112104][ T6949] panic+0x349/0x880 [ 220.115997][ T6949] ? check_panic_on_warn+0x21/0xb0 [ 220.121101][ T6949] ? __pfx_panic+0x10/0x10 [ 220.125513][ T6949] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 220.131484][ T6949] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 220.137803][ T6949] check_panic_on_warn+0x86/0xb0 [ 220.142823][ T6949] ? ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 220.148451][ T6949] end_report+0x77/0x160 [ 220.152708][ T6949] kasan_report+0x154/0x180 [ 220.157208][ T6949] ? ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 220.162844][ T6949] ocfs2_dir_foreach_blk+0x132c/0x1b20 [ 220.168305][ T6949] ? do_raw_spin_unlock+0x13c/0x8b0 [ 220.173495][ T6949] ? _raw_spin_unlock+0x28/0x50 [ 220.178339][ T6949] ? __pfx_ocfs2_dir_foreach_blk+0x10/0x10 [ 220.184144][ T6949] ? ocfs2_inode_lock_atime+0x25f/0x5b0 [ 220.189681][ T6949] ? __pfx_ocfs2_inode_lock_atime+0x10/0x10 [ 220.195561][ T6949] ? __pfx___might_resched+0x10/0x10 [ 220.200840][ T6949] ocfs2_readdir+0x2a1/0x5e0 [ 220.205432][ T6949] ? __pfx_ocfs2_readdir+0x10/0x10 [ 220.210575][ T6949] ? down_write+0x18c/0x220 [ 220.215094][ T6949] ? __pfx_down_write+0x10/0x10 [ 220.219968][ T6949] ? __x64_sys_lseek+0x180/0x1e0 [ 220.224897][ T6949] ? __pfx_ocfs2_readdir+0x10/0x10 [ 220.230011][ T6949] wrap_directory_iterator+0x91/0xd0 [ 220.235290][ T6949] iterate_dir+0x5a9/0x760 [ 220.239696][ T6949] __se_sys_getdents+0x1fd/0x4e0 [ 220.244627][ T6949] ? __pfx___se_sys_getdents+0x10/0x10 [ 220.250074][ T6949] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 220.256049][ T6949] ? __pfx_filldir+0x10/0x10 [ 220.260629][ T6949] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.266947][ T6949] ? do_syscall_64+0x100/0x230 [ 220.271723][ T6949] ? do_syscall_64+0xb6/0x230 [ 220.276388][ T6949] do_syscall_64+0xf3/0x230 [ 220.280879][ T6949] ? clear_bhb_loop+0x35/0x90 [ 220.285553][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.291470][ T6949] RIP: 0033:0x7fbe8b38cde9 [ 220.295892][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.315533][ T6949] RSP: 002b:00007fbe8c257038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 220.323948][ T6949] RAX: ffffffffffffffda RBX: 00007fbe8b5a5fa0 RCX: 00007fbe8b38cde9 [ 220.331913][ T6949] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000004 [ 220.339874][ T6949] RBP: 00007fbe8b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 220.347854][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.355847][ T6949] R13: 0000000000000000 R14: 00007fbe8b5a5fa0 R15: 00007ffe1f1a6e68 [ 220.363850][ T6949] [ 220.367003][ T6949] Kernel Offset: disabled [ 220.371317][ T6949] Rebooting in 86400 seconds..