last executing test programs: 3m22.873355167s ago: executing program 1 (id=114): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) read$char_usb(r0, &(0x7f00000000c0)=""/9, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x18c6, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0x18c6) 3m22.045084671s ago: executing program 1 (id=121): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 3m21.917454947s ago: executing program 3 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xe) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11813, r1, 0x0) ftruncate(r1, 0xc17a) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="ac", 0xfffffdef}], 0x1) 3m21.550597941s ago: executing program 1 (id=124): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x4000) 3m21.087186792s ago: executing program 3 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3m20.837406712s ago: executing program 1 (id=128): syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x8, 0x2e2, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 3m20.355310509s ago: executing program 1 (id=130): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced918", 0x78}, {&(0x7f0000000000)="b3da23cbcecb0b0107a496fbe0", 0xd}, {&(0x7f0000000380)="08d69fe50cd7a79471d8419b0bb9ae9b86ca44a80d0bd986922f24a62dd8eec5a0b561b310cdaa32d1cf3a8aa7e804b357ae5dd9eeb928195a18529d312903a9", 0x40}], 0x3}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 3m17.613308928s ago: executing program 1 (id=136): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x18) open(&(0x7f0000000140)='./file0\x00', 0x4182, 0x0) select(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffff81, 0xe7, 0x0, 0x80000001, 0x7, 0x81, 0x6}, &(0x7f0000000280)={0x1ac, 0x3, 0x800000000, 0x1, 0xdba1, 0x3af, 0x3, 0xaf}, 0x0, 0x0) 3m16.829953407s ago: executing program 32 (id=136): socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r2}, 0x18) open(&(0x7f0000000140)='./file0\x00', 0x4182, 0x0) select(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffff81, 0xe7, 0x0, 0x80000001, 0x7, 0x81, 0x6}, &(0x7f0000000280)={0x1ac, 0x3, 0x800000000, 0x1, 0xdba1, 0x3af, 0x3, 0xaf}, 0x0, 0x0) 3m16.579024477s ago: executing program 3 (id=141): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x4d0082) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) 3m13.502439101s ago: executing program 3 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 3m12.97800738s ago: executing program 3 (id=156): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000840)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m12.239769476s ago: executing program 3 (id=159): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000c00)}, 0x2}], 0x1, 0x31042, 0x0) 3m11.095577251s ago: executing program 33 (id=159): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000c00)}, 0x2}], 0x1, 0x31042, 0x0) 2m26.49002933s ago: executing program 5 (id=292): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000001200)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2a02053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) creat(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x110) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe543f6d5d806d183) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x82) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 2m25.184861179s ago: executing program 5 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) 2m24.547686195s ago: executing program 5 (id=300): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x9}, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) 2m21.877322733s ago: executing program 5 (id=306): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 2m20.306205173s ago: executing program 5 (id=312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nobh}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x88d}}, {@delalloc}, {@discard}, {@nojournal_checksum}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2m17.366242241s ago: executing program 5 (id=320): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r0, 0x0, 0x101100, 0xe0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$VT_RELDISP(r3, 0x5605) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x31, {0x3baf, 0x0, 0x7fff, 0xffffffff}}, 0x0}) 2m16.671250546s ago: executing program 34 (id=320): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r0, 0x0, 0x101100, 0xe0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$VT_RELDISP(r3, 0x5605) syz_fuse_handle_req(r1, &(0x7f0000004200)="a0079aaa11ff5e8ef37303be8c4f4ac7f526a3f6f2436489867481efdd8b8284dd4876298c977a4fefd0b6a9cc7f8f129c9615124c276c04c0dd0c1f251cabedb3685af95d8c424553e9c2a099a43fabe4a26b4b841ecc4cda3dad9629a54f867d824cbabe4284b46c28046a59be5f3a7a684beaa790458193e11365b76e9707177474cbe4fa1d2403001529d7613a64a917e474be9bbaacad615f52a71cb702ff9abb3b7e864f8aeba2c95bca4534d499dd233e634f161b8dc00a9777b06afd660c102151bbebab22875e894f162859f14295ccc8f860a6ed93e7dadeaa0834c9c278106428637403269c6466aa343b866031d475102588c689446a551b0608fc0e8c51c43631667ad5c63b47012fbdd58ccb2781d361a9bb4f23dd8d52d94b155d88c12ac5e2e3cb00c98682da1600eac20a8afcaaf7c9643f541c499a3de6859eeef2c236d559c8a66ad137815264f4504afb9768a554ea8fe9177c5093c07861d54aeb2b46c7d0bfe323f12649b0c1112ec5b6f55684945ef9ec4c669c25559188fdf70b5e6c295a5360993f0fa1d3d296bbd69d20925762165fdd65eafd0a7aeff882aed22be61758193e3c616e86f3c6f3dfd667e664ba47610ea25e0897d464bb4812d8963dbe4025f6377cdf7570b156680a2a158cf3d53f9555f499bef4e2dc43584bb542beda80048b732542883c6df65d9b473a665e443365f35962c97e19afe8c0251507ae8273aff68a49e7e81e1ad07de52d9c0437a78b76ad77dd5b79c4257f82d8678090ee2a295c1a5f9ddad249bc4f63d6797ff18e9c22363b649d959869e45804f0c0f1246e3bd23803eed02d9e377ea3d7b31c2ca5f36c8efb5bfaf6f698c7ee4e7567c61788e61b58c88e50b5cc3b51aec1ae74ab26f9373bbb5d304446544a08c66cdc7838bc6ba4d42564101e493579797d452cc20a2eccf44718e2737c1903b0041c11cf9f76c673174efbac6894ad81bf8ec3dff0d3ad8436638bd40e6824a01f6dddd871e2be0c4b8e946c775023f7938d3e9353ea3c9550862f2e15a11daca1cfb99eb1a268a177fd05f916a210829dbb8d72c0fdc4baf446e787e904c22889673a8d368607e268c6044de51f9f2533dead5d97590839da067c9f6c8b26534dd0e568ef0ca9247125cc6c16c0425f3af65ef21e926f010236bebf75ff3be02a26ca2382680fd9aeba21306e9d6e45dcf72d6b495f8ac7240193180c45de1fb54cea7a7f38b67c2f5c9fb1e7eacbdbc840122de66fdc828d703380cc05d8319cc47495e803c2386654f9a885a9665160aac3fed6ab5d670bfabdd8c4b307b1fbd0aa2112542a645cec6dcd0365317f0097dd893175c0b29f5e15cb6b4cb79fa8083e84f11e9863798ce7203207557106bb93326af9e0b618aafabdc7cbb0bd36a22f1266e9a51232701886912b01fa128bcdc418a19bea4f4929ec106ebc4ebfff2a146586f1a3915b2c4b413165d0cbe770d1619b4150f5415c410c2644955dafbd22ce48af7044041b089342cbbba94169a35cd2e8ec7dbdda0f2af14146eaad1ca07b5b00665f9e7ef926d4436e461d802cec0181bfc26edf36381c20e2f5d3827652327da598a1e7c0b5107d85aa2cf96158dbb27ba2aedf7819687bb905f19d2d8c8449afcc4abf96574685cac038e7aad14da057d1d03952ac766a5876cee59537da992d94aa323c7b9c6723dda0c317b00db0255a538434bb51db99461820c3a5893e4f02542a511d1a0e6613532f38bb2cdaf594bed23c6a3bcec14e7ff44f9d0ece051a28c844f340442d036365394033deed2b14e494a094dc0517235b6d3adf15b2394af59280bef07bdc82df1ae8130b27061d2f3ab465d2843da9c0e1b320a88dde89add391301dd8239b43100c0ade00f7733230aab0ee6c8b63e01b46c57460ea82b7f0b13b73de02781fdc9e3f15f4ad472567fde8fdcdd680aab6b3f3e4ea86c7bcc555d74253c1a2301acf5b6c58ac1541544cdb64ca559094e96e01ff23a06e1bf6385cc7b5b063e4bbc0fc864ce68a0935969227aff08a5c6a13e1264f12f200a7ef1bbc4650a33a2ef4c2a2be2f27c33e8259bb1c6fc81b4250678adf81f9056c1f872da3d959450733820bcbbf36d4f756f54baa2b87e8183c7d65404a8e6758e6d18c2e6b117ecbfbfa76da00d8018cf8faf23ffdad84788d6a973bda98e2e8fad114dd9df4ad8ce2fb91b4104e1661de375d98841b06d039817785b4ee3d624209d7d940d1db2ada93d6c037d946759f42ed547a52ada9fab21d10710ff9c35cacab00f85828f8bce1afc3a9146fc85f6d8933de2c8d856290e2a750da93669963b9c8b546510c52f443d92be208c8eb9a6d9f027fc5fe637fccb05cc71dd59617970d0cbf34f1bc57ee7de17b7d45e779a3b263cc045f17c063e5ea64843009da006dcc70b7486b95a1e9bdf12838c30ffdb21ad3198d6172673a6016e8784fffdf66496929731d02e22d8d61711fd49a4032947686d28b7c32d7167fcc2b3edbbf0be31232b965dcd5361083e014cf502a02fd51a7b5a594280a8432147c295f1dd0e0c1c435863d8ff28f5ecd9d3ad56a5bf5bdb85216204b94093ba0337bed9e71ebb453c2fd13770b43862ba89d10cb255934217939a899f1e9ff1e3ab5e370f0b8e08beeddd9a0482556a4995838b1c22453c563d8d194e80e9fa6ef8750e965b5bd4776986eb7e8c57f1447cb6be8f7727527052cfb812262d9b69af80972903b4690d209417fc3238ff8c88684842271ecda7ab630b7d800996b2f805b58a52b82a9a39e2db5102d0fcc821806a8d6ed77276a3b4f7f27b079b77e100663bf554aeee9e8cdca134fa16a3554b4c934f6dd5297751d26839ca857a97b9c50f196783246ce11c818621fb463be668ab0963f7c469a8c2ce728102bd02f8b977ba537809b7748525832477197d6e47c8d98fb03149c111c11eb94cbec24677844b43bc4ebd521ec0acade33f729c797c9f8d4cd8f406253c199aade117a2a3f3737d7ff1c74af8299c9ea8c1634a8236e9e3c58185874147ae1073e9e6b6c154fb7d2e0a85f6a85a43724018527e4e86e80bc8e80f70ff36bd703e25751a34528c84ea0029903bcb9fba94e56dde65eede2e8f08b852652f1d31d53557432857c7a99e5965c66f361ec6f61cb9d0a8e36d2b9070c3381d405eac07566e5d2ce5e1c3f847a5f7f28ab0ab842a3197da5663e1a495168b57e27db6d77004cebc2d6f42bce0eee639a07fe1aee3f231e4fb3be9bd8490632f7b27de750bd3ebed357214e87e7db3b75e9d95149efe02d3eb14ebfc4e10edf82b26e1bc0c196b54bc5f6c26f21167e3eaa725db3a087659a0dba3a0d506707f90289970a72d2e8d37adb2b8d336c169864457abeae62a52c3c88de8da5b19cba07ccdd67b5765178032f6372de56e867a3d9aea57974d5c70b0c6f24f6c9aafe8fe0d7587d72c556d422d47f8b946f1a36f202ac7f681dc99e5de9c7d9aa32f4a5b919e304394dd616ce6ed7cd64256f774778b6ab8e26f4aad040fcbd68f14f0100925ee91b866f44f4192fa07aeb699985ff0841d1cec941d44445b075e1a18b84c1533aac8c0ee0acceed5293e879a1b6d336fd85d00e33c2cea6853ea63b9aa16a496f9a7bc47b35673e7676bc4224c1496969c3e695c1cf48b8c3375a63256391d059f543ec93fc3ca8adafd9f3d254d950147560ea42a34859e43e3c02db53c9072f3dd7573086ec80dc6230205b223dfbc8d85d9969b9587128bf98fdc174714aee3afa20d274097a05ed03f4ed4e3e743d9af3df10ff32770ef073f95238a49ac9e0ec1a7b46d15af918b5b5c96d13ce8144098e4ea8ef64bfede831b4e1d11327a9a75500755d053c882dccbd90463018ac5cbb755326873042799f507f86172117a475ac7cb0e95b27ee968626021885ce04f5f000829a27af6d57419d675659e417f6918f7446deb3319a9c35d31731200a7af1c99c597278e6d94cbe0a29ab300b4d89cca86502eb310728090336e67928b196343d7471f74bc12de537af4f3b9245b20153c2184260056ddea534ead79ba92bad458e10632d01ce40ccda9d003736de6d72564847d94400f541092a4e8c8a16cb5e36870e59e29d4372fb3987acb5bab741404c643582d713be602a1b78ab6f9139ea89e470b663080eff0bf3e6b8d5d26e548e8c2e1d6cb0ec45222f7afad4b55421c20111b83f617786a16a17836a7a3622d1d5854c772e9f7f76ccd6e4dedf0302b6d84334999bf8fba66a2560ead8c505dd18a91d79fe24ff8bf7dfaf821ba1a7b205267d765e7e7f8a4a24d918c57f0d2e97caa3494349e6be77adb5547a564df111a8d653b618d7517ef720485fa06abd97e75e20c575b5b7d124b51dc9c865cef43a3308bb68ec516de96da5b064deee5d61e5462ded78811d04d319f7470438f9e3ec8a2e32dfe177e57b55f99a9721f9dcceb8a276ca5f6e0e6af9ad13f795ef8374e66b3fb1a3a51207c07e09d5ac43517ea4e7addbbe201c6d8503700477a7c75ae568e317556e080ba8ab39e79962d7430b3c5922746bdd285c1d2c5293cb8e097036b81b82f987ab80c1363183f2216ddb7d5d3f5eff03803dc2eb5fe269d347c1e8788eb970eda959e75908f0bacd3083d71036969949365f1d50d3f55012fc551e99eee078115af653769bbf68baf0ea8a2dffc394d9738108293ffa17c87e851a57709066ccae2bb18092d61fde656799e63184ae3a6c746fe6d1ac373737dda7dc96cc5b47d031ceb3238dbc8ac1590ad3eeba5563da6d274a8b8d5bb4a382ae83475d981495628d3e26b8699380215d466300ecf1d645f2530d0f08d2298dc2cb22fa6abb9736a11316e2c7f6ab7ee9a1262bcc57a93cfef27bcdf7057f63db97fc165065cf6fd9c58846d8ac35398a9dceeef11733b9ed3a4a4ac664a584d816f623aca2bb96ce7475996c108fffb23fe2690e839d76dff8be3fddd5beb04d7896c70ab5bd387e0238c417ebab5a7f48a3a9311c5c3b92d1e2ec6171313991d71b297d521e09cd71df60246d7eac4163bb1e5b72e6104b74389cd021f9526210cf69da1743edb82bfb1580633fac2499cd3c674aaa8d2eb4376b1a5478005f958d9ba90e24443975c4e95554b13602a7688eac0bc9ecd2756629b4390020d8895e39de2f7ba0ed35792257fffde6cb9442be0b4e6910b9db2f376040e7373a3597e2f70d3a36e65c10a5f766f3ee027782f31f1fd861ff07e10a1dfafe66e6d5f2931439fd59a0dce0d82fdc4cac5053191a1a247ec6b6ddfe812ac436646b6a7e45d46c6d2d54845b4427951c48fba2766431169b69aac50a641ce0f6fa3e63e2887c16431b80b4a502915b7aa65d2936b7e3783ac0a8837adf8c72d1133e969e11b23dc408757a6b45c4a47d6e93b44b8706a5af3c362004aaef2ddeb4655de5b4a506f3a8477cf82bbd3efc76afa26fcf6d5b5506d9180d64e8c7242825b3533e2a11a391e736a5f2394ad74f11952c27e4e06d42940c6a15fc52aacfcff087e0a006011d626d34cee3a5248b4dd74df21251b083ca2d2f91ebd684173e3b25a98ab9791b904cb24f16c5a7811e6bb9451c6481aa1db70848dc2f439acb9944de3af051a61423959d95df54093ad49048f7efa725a42b693c8cd25ffa3097b0b22fb0860c04dc956715abe694aace6a6a37abb26080619464165022de131d9ce01fc84d3d7cc0a8d15bc85ee09b648eaee02552410dfb829d0710bf553d5a40871cb3e7138630ca528cc1ab5bb10c858f28e6f6b142bfc532a96a28558589d7f729c23c7db1abba71bb7e2d90f347c6f437427dd2a005bbd5017cef4aee46697a842a94d40811dd25509321a370c85c855a864c3663c92306636b8469262cbfa97a02e93bb3746d8f837affec328a0ee35386174d919b0a05efddf7869c1d41280a563f69aec542aff42b82a9b10b788df33547a8cfc8b8cca38ec60717ab06635441a9ba1fe1a15e9c8e6545423327f0e904dc241b7a4c49d696ff2c92980d6e77728f955a1e4ec13c89b92a8f7256bc0098c040e83414f6a7fce220c942b0627771e198bc91068cca0a3f25559610bb00f82a4d445dcbc6cb5a2e45b68ef8a3e8dd7ff21deed4b27a54bc0fa956755aab9b799ef184b2f417c32617c52f525afc96134a369e03ecc8c5b223f7fbee080ec52be643bb10d751b2796bf3d6d0420b7b5dfd8745074d317b224c7325fd4df2bfeb3c5782f1699722a75f3a0fd90fc21e8ec1b1cf0fe7aae0d9171d72b4c54f293f1f5bb81f5cbd612f6449183eb3ea462f5fc98ac6c843ec53a6280becae835f5c1882bc2a2a771953a75c054aa39e97c72ede75baf2177bded79d43d3eb44c1833ec78af69db1475d3436c913c7f7eb213f9250492feefb214d04df8a20c028f559c289af3a97c0a1f766b51ce0757ab3518c9b832abb4f7e008c8387cdc6f81bff50c5d9e3bb0da50abe9a744bac529e3e70dafa60a52063681a46d7ef928f02241e872a6084d94eeca75a08a40a32a87e7a87ecc7a0fd57d1e630998905aff693accb021a3deaa4c64194dc0ed15c03a7a7ec8c6c9fb09315cf8285b0685ebc6af90ae20f5df0d160a7b3ac1a00dad3726d21d57d2b437d586cc09f02f5b8d0d1817601b951d3365ea1f56ade888ca6f0cb1629dadaeaf123ac0f0d76f56719d064855fc744323642ec928670d81833652a5fe17abe98bdc470b98aa429eace2af8027b1e5d9be405045ced4dee2dfd37b234197918b03390bf45ad664e0f38b3da9c55390de681be6a45079477ff92a41e0439a4651a6a5303df430f16bd228319456727b9825795ac92e7db0e6fb23be0f12476712053e73de58a5e508876bab9bc23d1f7a54cf50027b54f6122245c426d4966ea3d04dd5ffe16093dcb7291b28f7d94c4821e2113979211fbe747b324b357cc257c10fa5c5150dd06fba9480473b258c6cef649a4c7256d8ee750da58cdbc5d631a007ab61c0e58b67a79c4f62016ec40515a4387be1a9b980803066f8563c97f04f72e5a8ffe78a4b372eaabdced7b8d5455e5f97c5218f15365a0166cd29043677fa968eadf792fc4548be81bc8799c65f8f7d349c84dc3b8ac7ffa08e926ff36b20277b8223d772d4d59f0d190d6db47157ca8fef897ad7d6e013da1649925618daac956f38bf3d3181560482eb0beb8c2c7594d82e1a7ddeb01f8d3377fa2985af5d9807d2b9d92ae7ac5d78fd5bdcf558ab151ad824972c7080a02ec12cc18f250d58a487578577be6e6f2a7e0278c356a937bde8c83f11cff2c36ba39e34383aaa59b64590917e69878fe9613daca87ce94d19dfc2fa53a1922ffd458782936108f7bb6b8fd900c6f61832e4036b206a8d5bfc1198a5ef8f44be3e8b7ea982241742148204a8f9cafd2719fa0b423ca38c2369ecfd5a75b1ad638488c2c206924687f2dba76aebd5faaf87c2f8114c7265d1504e0540236c2adbd99f4bc1abe64b8724cbe0594892df5fbc13bfa359554f7e297aac91d1e186f19ac6bc0cd6ac18bb574eeffc64dd2869d69a9cc5ca3793d50c7cca32739427442c3ed497b7c3281e3f2accc7507e40374f1941a879d5f51c6ce6b599bc960aede51a786f05f14cf5eb8fb918125a2a5603cf9f94ed65c96dd1fbf750afc9aeb20970cfb92e0384ad68bf549a6743544935d73bb3bd8303c8c7772c9bc52c7899d7408332eb1c4b41f2fee85a55ff3d646d0cbfdc51f373845cb18da22ed4fdcaae9187e3a9066a6ebc9fee4fdf0aa83c977ac3908b936d8063343079242c063293ec41dc41d278a1213a5cb7eef608e88900e5a22690deb8dedbba2c788162d6755e049818e7e436b6dba5acdc72de3c3aada46175e4623d30ee5c6099bf9b258c54040f163efe3f55b3b5e3c07c9f55c9539bf16b3643edece66416567633f582eac104b060c631dc9f790f8b3215e3dbb60534173507c4a30b56578f502eced9af0cbcd89151874044599a6f4b9313eb52cee9b6c0812c7f66579ff83634309f9615a86f9a0b3896813938d205de319d155c5bd5a3985cdb832d235a76d097b12000b1630b1b1bab815057736179e187331d889b8631561a178604dae6af6c3589de4ef16f4c280bb43705609d441838b11a4b3a523e185784df001fd1ce03d025befbdb25ed13c5f3c5aee2abbbef93c188fa493b2f8280f434a0598115f62e009389133f989a245ea4caf36ea995ba78c925029643d0584f81953c11310cb7a94726958d2686bf3597462b96d6a51f97a640a2a252682c530e2ba57de023de9c25a293a1be36b994415ffc4125cbb88afc0d772632168fd1dfac6bb60dff732787b11a62bc3c808364aefa6eafdad299426602181f7af1fcd62b7bf63d3dea975fa595cf8be87b6f52cc7d20a01acb3c5bdfeff36f07b550c3acccf949fa7071bd042f0db1d777a84a8da19abe1fb102d87a87582787f2611b0ced8e4f6f0bff921389e87c1cd5d32fa85ef53ca32bd51ecbb4cacd2e13f304e6cf1f4f4d98f87a485ebeff96d7ac1f3643741b03eb0be96c8eeefeb49af28f9adb5b45832027046416848d1271694e8aaf96e57302edece57c96b3f54ba200c39fe1295837326c622b6cf50070369f609fe44dc8777b49d2c9f31d99baefbecb7231c96a816163f8131b4383a2790aed11ae566924b43e4c43726a9d1273c0b9e15f179b29cd2304f55b6cf8f2358eac1f39e238ad17890da57c9ffd2adcf40e5e85843c3ee69868950057652ea7d0a6a81b4c06817698cadbe9bd78ceef85b932b11632f59c311c40a6353ba72e604edee2dd25b085a5c44926c254d2ddffd9edc05997becdbfb11be8df67cc4c0b8a4880923ab1dae958e40b14fb733d7317ee9335dc49418d8e55b00363af4d3bd6ec9d50ec62e5544febe71bdb1a04cf69bd240bdc33fbcd4c67aa0aaa45eb4a030c454cccb64dafaffa47eaa72a077e29615ef32b0ce12cee54c8bebfa982b77150d4096219518d96b469854c854f36af326de81dee36772508b716d38d709e91772e216d3c1a6bbd23329dd487d719646e37a47479c83d517bdc0c9efbb73eb4289af4d213f2e2259b393bb54873dacabd504699e1f44e1e9adbf34f22b2132f95253aa3d3d5274b0af77873b82cc37614883f1a92b7192c6c8a20670d103f720a587cdebde199b84272ccc51d76dacc04dce2504d4846b037056342e8478cfa389d9b3c310133c1c92b53c154a277778085be8cc211708f286ff3905ad5f9e0388eae0108a5216d71c4c7b8c462fa08d03697d15e1ff9734d9dbe9373649260f47b33ccdf0c6654948f21fd1b50f837815ba458cc586139886664c07a59bfcd2eadf22ef02bacd1a921e6d2b2ae6976809021926a8399dc55b4005ce894858a134d61d329c7930613f77ba1d61d1b69fcbca15184308e7241b0551f4dd651c8fb53baa76266adb9e83fd15840fc8ace9551e32c1470551d929039bbfbd7e47aaf0b18be153bc70801a865ae2ee18d85516e9fbc1537cd4a665e8b1aecc319e5246af163ded0f35c9ed71732dacdda10d121f3a69be0f69f13af6bbefaac12fa05e7158f67c645ec3cc6f28e1fdc45db7fbcc9da12c969c8d22090827935491f82cc9c4ff36adc4c68d5d8b27fd09f3c915eb1939d49c16213b6f06ee724b1d8fbbd6c4856f3e432aa1fe29171734e70215e02f29a8ebd823d73f6fe3916eb40b823866623b5a145349d51e7fded719e60547a4b607da9f291bc85962fee854613d17c9487bed375c3718f1a51b80e32ae2f1995cef7140aa01ea1b19d202017af4989679f33e078ca2c578f16bbffc317fe7ec7988f450272a6ef7adaf86ddba29eb40c8da217197717ecbefb228716d8972906e49c60cfcf288bf32ecd82f4b382cbdbd670f4f08cf42312e20627882cc8ef7b2c1c227f38ab6602ea0971f2abc5f407998e0691d84f54b422c566d04a4c810773b5e4d0b82006154032fbeb00aa60adaf4a1464c04aa458af3cab5da7c1e72ef71c8748d6993ce5d2bf5299951e3d7f8536f203d4d07c1de5c1f0c6b5de1da980ada41b380d52cad8fe6d770dcc8a4403ce5086ad81454b90a08e6bc676a05877a434d9b5383dbccde7ddba2d0e5582e081db2bb769754a0929f7658caba2caa4812221137205028ee41902bde1ebf8a2354bb899c21bbd128567a173539255bff07d68ef2eecc1d8c6891e711a1d6ee33560fe246979a229446efe7bd4311e80178e7ccd7774c55370bc9a643a6a52de879274c73ada62104a277fa154d4500c54f336a0d21360e943df22ebd77041d1d9d60abf0a03a70f74d817549ef20887fe9ba92201fb408c073005eb530aa6433abde6891dde34f6cdc85d49a06675d57c847ab35b65911bb921dfb8a925c5fffa69261ffdcc17b3acd023cb88b4c9507bc605a3408f76ba08bbf6addb5d857fd689d0d23a9b72a72ec9dd33d7a6ad0d6d9722b74e03be70e9c0113852c693b343f0adaf9deaad9d5d146f08dea1f2cca1e3fed2b7d86c6ecaf2e322e8e409ce98b3cc3106037675cd644a60c0e486775fb7792c80c044c3fdc62fc4f9b9c60b6145a2064106eabf4a64e962eb557dec8d3802aab9ffa990ae9a72cff868b8cd639d41ee5c91d67d61b36ab98dd03949e282329368ec67823061c6c93abc7393ecddbd52f8513a2cd916e7115aaf08d126dc48a19e84ee9f6d408ab6089b7faaaf0812b10ec0f673032e189d1469ff32a40a7d0f05110cf279c27bd0157c3ce6da7d017ee66e579743414e98982451e21279a1d175f0b62135af8be9bf905e47671d9e5507f4b24c10e8f6433ed2c13b54a74200e84fdbb5a319da87947545e721d2577d5b96b2fb2c3777d32f81bdb04a8cc746ec83cd5ceff6b97d365e2729beb5b8df5ec5be2e5f81a8b1309274a762a3fbd993c0ec64e3446216fb04e844c7e6650a71cc50f552699c967542216a403b0ada33fdc4c28cf481f7c86e45ffb7b8ef6c2ff408c38814172e72c31d39ff84a0b3e35f20ca9674615ca576726e859b2c04af25fefcf9d1d52a5b807c740155bcdc4fca3a00a5f787f12ec9823e421500b22b40ae330e5bcc5ee7272b97291bd58a35d424673fad824307673886c528d1b7e967214729f963d0b4658891da011dd3825747ab66662d2618ea062bb82d28bbe52d002af94cf41aebc8184ce3004fa0505880c97c26c4595dd5260be94b206fef2d46a98df0537aee1a5ac26b9c85a2d2ecb27c1cfbf02108f571b819609cb512f4377a3d03b232320fbea2ffc459095ed58fb6da563f840eb6124b314386366516780b3ec08839bd981245dbfa9da31e204d4ac563a1ff5d1905755afddaa8c4e19b21e6fc0d6099bb3af7d3b69ba7348c62c3b66b46f0028c81b5fdcbc5a6c769d4ee2ed0d522313bfdd2260ec7acc4f3e9fcb319a6ced4218bddb9b35bfde32a8974658f6a73569ca61f7644cfbab1c4d15ccd812bc4c79ff49f246b0a322c0c51961a9a57102330a12b1907cc3a9440f951a8e0b29e9d27f9756f97641634bc7420b25d7787c511bb2d080", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x31, {0x3baf, 0x0, 0x7fff, 0xffffffff}}, 0x0}) 2m13.09575499s ago: executing program 0 (id=338): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x0, 0x1}, {0x1c, 0xfff1}}}, 0x24}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 2m12.485155701s ago: executing program 0 (id=341): r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e30000000008004500009bae8d7b512866a178ac1e08000000000000dce0f99473160001e000910600ff010000000000000000ac1414aaac1434005fabaf8a19bea61157"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000240)={[{@ikeep}, {@pquota}, {@swalloc}, {@prjquota}]}, 0x1, 0x9867, &(0x7f00000130c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000540), 0x24, 0x0) listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=""/113, 0x71) setxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f00000009c0)=ANY=[], 0xe00f, 0x0) 2m9.43833059s ago: executing program 0 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x2, 0x787, &(0x7f0000001000)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") 2m7.145679965s ago: executing program 0 (id=364): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) munlockall() bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m6.101178677s ago: executing program 0 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) 2m5.281259689s ago: executing program 0 (id=370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x7ffe, 0x184c, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) 1m49.989407844s ago: executing program 35 (id=370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x7ffe, 0x184c, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) 15.980829834s ago: executing program 8 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x80) 13.977610994s ago: executing program 8 (id=848): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 13.185525408s ago: executing program 8 (id=851): socket$kcm(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 11.941621462s ago: executing program 8 (id=857): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x4000, 0x0) 11.929379744s ago: executing program 2 (id=858): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 10.863032331s ago: executing program 9 (id=861): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1003f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780055c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000080d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f635b2427847b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 10.832576725s ago: executing program 6 (id=863): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x800) pselect6(0x40, &(0x7f0000000380)={0x38, 0x0, 0x0, 0x20000000, 0x3, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f3e000000563484ce02d6d8d228582cda3b35959f6951815877cc77a9bca575ec1225b8de7fe9cd5454562470336a0dde05b3f8c1a6bab3dcbf6030ea8ec97a"], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0}) 10.737252922s ago: executing program 8 (id=864): socket(0x1d, 0x2, 0x6) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.377493323s ago: executing program 4 (id=866): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000180)="ee096c1c9e936eed8fa273dd894b010100006e00"/30, 0x1e}, {&(0x7f0000000100)="6a76030c30a2325b6a6190", 0xb}], 0x2) 9.318885943s ago: executing program 9 (id=867): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "35f36008c636847e", "b1528832dadd8423b4b617efc885a45d", "49d69735", "1c228c29966e0467"}, 0x28) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.317913694s ago: executing program 2 (id=868): syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed000e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x9300f83a5e095330) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000340)) getdents(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='xprtrdma_prepsend_failed\x00'}, 0x18) gettid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 9.041224956s ago: executing program 8 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.943605605s ago: executing program 4 (id=871): r0 = socket(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141301) openat$vimc0(0xffffffffffffff9c, &(0x7f0000004440), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 8.506911799s ago: executing program 36 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.494913238s ago: executing program 9 (id=873): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c", 0xce}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee3", 0x63}, {&(0x7f0000000800)="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", 0x1ba}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9d397a82e24debd371e6855b7dc2dea47d57a9dfbf4fb2ccb3f975c3851c6b5399ab80c4ba95604f70a69674cfe820d82fb06b243625a8a9e4ee52e7c2ec4d63241fb00efd1a485a36dfb4a7dd5", 0xc4}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 8.493952029s ago: executing program 2 (id=874): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r6, 0x0, 0x24) 7.475874531s ago: executing program 4 (id=876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) 7.355524519s ago: executing program 7 (id=877): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 7.349699151s ago: executing program 6 (id=878): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 7.177083682s ago: executing program 9 (id=879): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.790870354s ago: executing program 9 (id=880): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000000)=""/167, &(0x7f00000000c0)=0xa7) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 4.929755737s ago: executing program 2 (id=881): r0 = userfaultfd(0x80801) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001900)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.622017424s ago: executing program 4 (id=882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x509, &(0x7f00000008c0)="$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") 4.495960422s ago: executing program 7 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 4.474334323s ago: executing program 6 (id=884): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000040)={0x1d, r3}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000640)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)="8ba1835fdb98d51a4c548ee937bcffe2f74f66c4a434f8867177f7c4881eea0ed2dae7ff72729c253f306c71b00c75edb15b0637729643b1b7df86e8b11f8ed4f85e87077ce2e7a4745cb035b916e5f43d7966191fff9970188851ae8810fb1f", 0x60}, 0x1, 0x0, 0x0, 0x2400c840}, 0x48010) sendmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002680)="b875431a05b182855f", 0x9}], 0x1}}], 0x1, 0x0) 4.417086663s ago: executing program 9 (id=885): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 2.966736203s ago: executing program 7 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.914247353s ago: executing program 6 (id=887): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) socket$igmp(0x2, 0x3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)='./file0\x00', 0x400, 0x2000, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) 2.88462769s ago: executing program 4 (id=888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000040)) 2.561319041s ago: executing program 7 (id=889): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) 1.43686743s ago: executing program 4 (id=890): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000540)={{0x108, 0x1, 0x7f, 0xb2, 0x370, 0x80000001, 0xb, 0xfff}, "", ['\x00']}, 0x120) 1.410211938s ago: executing program 2 (id=901): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 1.409709312s ago: executing program 7 (id=891): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) 1.33790158s ago: executing program 6 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 985.244789ms ago: executing program 7 (id=893): sched_setscheduler(0x0, 0x2, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000180)=[{r2, 0x81}], 0x1f, 0x0, 0x0, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffffff600000, &(0x7f0000afaf0a)=""/246) close_range(r0, r1, 0x0) 912.243367ms ago: executing program 2 (id=894): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@resgid}, {@noload}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000001540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x38, r0, &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r3}, 0x18) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) 0s ago: executing program 6 (id=895): r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): lave_1: left promiscuous mode [ 132.365095][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.365174][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.366621][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.366662][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.487097][ T1076] veth1_macvtap: left promiscuous mode [ 132.487325][ T1076] veth0_macvtap: left promiscuous mode [ 132.487479][ T1076] veth1_vlan: left promiscuous mode [ 132.487701][ T1076] veth0_vlan: left promiscuous mode [ 133.406676][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.450764][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.460752][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.472501][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.483014][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.490681][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.796109][ T5843] Bluetooth: hci2: command tx timeout [ 134.562270][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 134.608755][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 135.461621][ T6399] chnl_net:caif_netlink_parms(): no params data found [ 135.532182][ T5843] Bluetooth: hci4: command tx timeout [ 135.864567][ T5843] Bluetooth: hci2: command tx timeout [ 136.399605][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.427910][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.452150][ T6399] bridge_slave_0: entered allmulticast mode [ 136.464966][ T6399] bridge_slave_0: entered promiscuous mode [ 136.500127][ T6512] syz.0.170 (6512): drop_caches: 2 [ 136.652575][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.659751][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.722419][ T6399] bridge_slave_1: entered allmulticast mode [ 136.756306][ T6399] bridge_slave_1: entered promiscuous mode [ 137.068681][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.152403][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.191884][ T968] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 137.290616][ T6399] team0: Port device team_slave_0 added [ 137.308424][ T5900] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.371494][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 137.397577][ T968] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 137.435386][ T968] usb 3-1: config 0 has no interface number 0 [ 137.465996][ T968] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 137.480322][ T6399] team0: Port device team_slave_1 added [ 137.506704][ T968] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 137.534416][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.538409][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.541578][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.589178][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.599707][ T968] usb 3-1: config 0 interface 41 has no altsetting 0 [ 137.617663][ T968] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 137.628125][ T5843] Bluetooth: hci4: command tx timeout [ 137.644789][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.658049][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.668886][ T968] usb 3-1: Product: syz [ 137.674182][ T5900] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.683894][ T968] usb 3-1: Manufacturer: syz [ 137.688724][ T968] usb 3-1: SerialNumber: syz [ 137.694395][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.717505][ T968] usb 3-1: config 0 descriptor?? [ 137.727900][ T5900] usb 5-1: config 0 descriptor?? [ 137.755186][ T6534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.768563][ T6534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.814540][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.832272][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.867410][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.919100][ T1076] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.962156][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.984529][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.022431][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.039509][ T6534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.044384][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 138.052463][ T6534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.141985][ T1076] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.170637][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.183006][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.190516][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.211629][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.226189][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.261317][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.275509][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.284225][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.322823][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.336035][ T5900] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 138.529646][ T6557] loop5: detected capacity change from 0 to 32768 [ 138.596561][ T1076] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.651618][ T5900] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 138.732034][ T5900] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 138.759585][ T6557] JBD2: Ignoring recovery information on journal [ 138.770696][ T6399] hsr_slave_0: entered promiscuous mode [ 138.833057][ T968] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 138.855590][ T6399] hsr_slave_1: entered promiscuous mode [ 138.864656][ T5900] usb 5-1: USB disconnect, device number 4 [ 138.900646][ T6399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.913604][ T6557] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 139.171106][ T6399] Cannot create hsr debugfs directory [ 139.444147][ T1076] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.446162][ T29] audit: type=1804 audit(1739158017.204:12): pid=6566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.181" name="/newroot/35/file1/file1" dev="loop5" ino=17059 res=1 errno=0 [ 139.526442][ T29] audit: type=1804 audit(1739158017.274:13): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.181" name="/newroot/35/file1/file1" dev="loop5" ino=17059 res=1 errno=0 [ 139.700612][ T5843] Bluetooth: hci4: command tx timeout [ 139.899825][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.925986][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.954508][ T5852] ocfs2: Unmounting device (7,5) on (node local) [ 139.964133][ T6492] bridge_slave_0: entered allmulticast mode [ 140.000073][ T6492] bridge_slave_0: entered promiscuous mode [ 140.040454][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.077014][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.106130][ T6492] bridge_slave_1: entered allmulticast mode [ 140.131433][ T6492] bridge_slave_1: entered promiscuous mode [ 140.154368][ T968] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 140.191364][ T968] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 140.235579][ T968] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 140.279378][ T968] usb 3-1: USB disconnect, device number 3 [ 140.372128][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.466464][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.644655][ T6492] team0: Port device team_slave_0 added [ 141.245064][ T6492] team0: Port device team_slave_1 added [ 141.324588][ T1076] bridge_slave_1: left allmulticast mode [ 141.335858][ T1076] bridge_slave_1: left promiscuous mode [ 141.362023][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.456366][ T1076] bridge_slave_0: left allmulticast mode [ 141.500343][ T1076] bridge_slave_0: left promiscuous mode [ 141.510066][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.781846][ T5843] Bluetooth: hci4: command tx timeout [ 141.865069][ T6608] Invalid ELF header magic: != ELF [ 142.802615][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.856126][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.887622][ T1076] bond0 (unregistering): Released all slaves [ 143.626815][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.661423][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.728476][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.790800][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.808127][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.889201][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.238068][ T6627] loop5: detected capacity change from 0 to 1024 [ 144.333368][ T6627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.360012][ T1076] hsr_slave_0: left promiscuous mode [ 144.366860][ T1076] hsr_slave_1: left promiscuous mode [ 144.374202][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.382796][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.397025][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.405526][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.511093][ T1076] veth1_macvtap: left promiscuous mode [ 144.537253][ T1076] veth0_macvtap: left promiscuous mode [ 144.543038][ T1076] veth1_vlan: left promiscuous mode [ 144.548598][ T1076] veth0_vlan: left promiscuous mode [ 144.752617][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.028493][ T6618] loop0: detected capacity change from 0 to 32768 [ 146.595631][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 146.714607][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 147.013181][ T6658] loop0: detected capacity change from 0 to 32768 [ 147.257042][ T6658] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 148.463758][ T5833] ocfs2: Unmounting device (7,0) on (node local) [ 148.731818][ T6492] hsr_slave_0: entered promiscuous mode [ 148.738336][ T6492] hsr_slave_1: entered promiscuous mode [ 148.993085][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.106087][ T6492] Cannot create hsr debugfs directory [ 149.421499][ T6399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.561498][ T6399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.654830][ T6399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.728952][ T6399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.703072][ T6492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 151.969668][ T6492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 152.022660][ T6492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 152.121465][ T6492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 152.378655][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.430693][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.569509][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.577705][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.676843][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 152.713639][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.720746][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.695387][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.768899][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.856825][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.863973][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.948404][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.955639][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.283721][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.377161][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.890075][ T6399] veth0_vlan: entered promiscuous mode [ 157.976362][ T6399] veth1_vlan: entered promiscuous mode [ 158.115753][ T6399] veth0_macvtap: entered promiscuous mode [ 158.151123][ T6492] veth0_vlan: entered promiscuous mode [ 158.186085][ T6399] veth1_macvtap: entered promiscuous mode [ 158.255101][ T6492] veth1_vlan: entered promiscuous mode [ 158.300702][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.348029][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.395901][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.408002][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.431736][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.451797][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.472695][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.520606][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.572826][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.592469][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.603156][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.614250][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.624907][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.634824][ T6399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.645671][ T6399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.658746][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.700917][ T6795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 158.803515][ T6399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.844277][ T6399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.881490][ T6399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.899295][ T6399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.169161][ T6492] veth0_macvtap: entered promiscuous mode [ 159.237417][ T6780] loop2: detected capacity change from 0 to 32768 [ 159.265017][ T6492] veth1_macvtap: entered promiscuous mode [ 159.337370][ T6780] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.077210][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.088015][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.119865][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.121567][ T6818] cgroup: name respecified [ 160.143761][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.191337][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.227887][ T6780] XFS (loop2): Ending clean mount [ 160.233685][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.251491][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.311362][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.351365][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.381808][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.433413][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.519266][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.556182][ T29] audit: type=1800 audit(1739158038.314:14): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.225" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 160.578212][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.578262][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.578291][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.578315][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.578342][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.578363][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.578389][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.578425][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.578452][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.581142][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.859340][ T29] audit: type=1800 audit(1739158038.444:15): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.225" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 161.046170][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.110033][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.121679][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.148832][ T6492] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.268723][ T6492] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.306409][ T6492] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.337012][ T6492] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.956644][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.991346][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.041164][ T6846] loop5: detected capacity change from 0 to 512 [ 163.149986][ T6846] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.208350][ T6848] loop0: detected capacity change from 0 to 2048 [ 163.217194][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.228298][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.258450][ T6848] EXT4-fs: Ignoring removed bh option [ 163.327291][ T6846] EXT4-fs (loop5): 1 orphan inode deleted [ 163.362547][ T6846] EXT4-fs (loop5): 1 truncate cleaned up [ 163.393386][ T6846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.472580][ T6848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.854648][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 164.032280][ T6854] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 164.190885][ T6854] EXT4-fs (loop5): Remounting filesystem read-only [ 164.252413][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.505094][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.289795][ T6944] pim6reg1: entered promiscuous mode [ 165.330077][ T6944] pim6reg1: entered allmulticast mode [ 165.355449][ T6948] Bluetooth: MGMT ver 1.23 [ 165.925240][ T6956] cgroup: name respecified [ 166.129670][ T6959] loop2: detected capacity change from 0 to 512 [ 166.612071][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.882704][ T6959] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.109972][ T6971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 167.408532][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.402585][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.262'. [ 168.431932][ T6990] bridge_slave_1: left allmulticast mode [ 168.462608][ T6990] bridge_slave_1: left promiscuous mode [ 168.506937][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.530496][ T6994] loop0: detected capacity change from 0 to 512 [ 168.596289][ T6994] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 168.680615][ T6994] EXT4-fs (loop0): invalid journal inode [ 168.744961][ T6990] bridge_slave_0: left allmulticast mode [ 168.802414][ T6990] bridge_slave_0: left promiscuous mode [ 168.808211][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.042104][ T7018] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.522497][ T7030] sch_tbf: burst 19872 is lower than device lo mtu (1075109906) ! [ 171.851423][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 171.859333][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.093279][ T7040] cgroup: name respecified [ 172.682527][ T29] audit: type=1326 audit(1739158050.444:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 172.840360][ T29] audit: type=1326 audit(1739158050.444:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 172.891418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.898648][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 172.951444][ T29] audit: type=1326 audit(1739158050.524:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 173.089671][ T29] audit: type=1326 audit(1739158050.524:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 173.194388][ T29] audit: type=1326 audit(1739158050.524:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 173.751364][ T29] audit: type=1326 audit(1739158050.524:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 173.814825][ T29] audit: type=1326 audit(1739158050.524:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 173.931405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.938661][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.981316][ T29] audit: type=1326 audit(1739158050.524:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 174.091291][ T29] audit: type=1326 audit(1739158050.524:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 174.210837][ T29] audit: type=1326 audit(1739158050.524:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.0.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 174.256560][ T7058] loop0: detected capacity change from 0 to 128 [ 174.730285][ T7058] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 174.906934][ T7058] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.971484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 174.978715][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.011806][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 176.623303][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.051626][ C0] net_ratelimit: 1 callbacks suppressed [ 177.051651][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.064665][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.504647][ T7096] loop5: detected capacity change from 0 to 1024 [ 177.584235][ T7096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.770244][ T7100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.805651][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 177.805675][ T29] audit: type=1326 audit(1739158055.564:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7102 comm="syz.0.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x0 [ 177.838738][ T7096] EXT4-fs warning (device loop5): empty_inline_dir:1837: bad inline directory (dir #12) - no `..' [ 178.047394][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.091426][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.098699][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.479434][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 178.955799][ T7137] input: syz1 as /devices/virtual/input/input5 [ 179.132133][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 179.139581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.016196][ T7151] loop7: detected capacity change from 0 to 32768 [ 180.113540][ T7151] XFS (loop7): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 180.171986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 180.179334][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.211446][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.218739][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.261569][ T7151] XFS (loop7): Ending clean mount [ 181.393998][ T5902] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x8 [ 181.452404][ T5902] XFS (loop7): Unmount and run xfs_repair [ 181.483495][ T5902] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 181.521689][ T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.569737][ T5902] 00000000: 41 42 33 42 00 00 00 20 00 00 00 00 00 00 00 ff AB3B... ........ [ 181.615567][ T5902] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40 ...............@ [ 181.681452][ T5902] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6 .~!...H8.-v7.. . [ 181.722407][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 181.733136][ T5902] 00000030: 00 00 00 00 b2 ef e1 5f 00 00 00 05 00 00 00 03 ......._........ [ 181.760423][ T47] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.793266][ T5902] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60 .......\.......` [ 181.810135][ T47] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.823963][ T5902] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 181.997420][ T47] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 182.251511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.259004][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 182.311559][ T5902] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.326912][ T5902] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 182.426710][ T47] usb 5-1: config 1 has no interface number 0 [ 182.463577][ T7151] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x244/0x4f0" at daddr 0x8 len 8 error 74 [ 182.488625][ T7151] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x402/0x980 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 182.503525][ T7151] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 182.530792][ T47] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.614787][ T47] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 182.691800][ T47] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 182.751424][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.841979][ T47] usb 5-1: can't set config #1, error -71 [ 182.893132][ T47] usb 5-1: USB disconnect, device number 5 [ 183.291413][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.298669][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.371985][ T6492] XFS (loop7): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 183.514546][ T7203] loop2: detected capacity change from 0 to 512 [ 183.524896][ T7203] EXT4-fs: Ignoring removed orlov option [ 183.724061][ T7203] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 183.735723][ T7203] EXT4-fs warning (device loop2): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 183.753692][ T7203] EXT4-fs (loop2): mount failed [ 184.331473][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.338788][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.371429][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.378692][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.872288][ T7230] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 186.411397][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.418688][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.220782][ T7259] overlayfs: failed to clone upperpath [ 187.451437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.458879][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.208513][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.218148][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.226929][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.236910][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.355555][ T5845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.363185][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.491416][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.498662][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.531401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.538623][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.450486][ T7270] chnl_net:caif_netlink_parms(): no params data found [ 190.491397][ T5845] Bluetooth: hci5: command tx timeout [ 190.571404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.578644][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.020531][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.042750][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.093918][ T7270] bridge_slave_0: entered allmulticast mode [ 191.155600][ T7270] bridge_slave_0: entered promiscuous mode [ 191.203477][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.224869][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.242013][ T7270] bridge_slave_1: entered allmulticast mode [ 191.258381][ T7270] bridge_slave_1: entered promiscuous mode [ 191.455798][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.523156][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.611399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.618667][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 191.814088][ T7270] team0: Port device team_slave_0 added [ 191.890007][ T7330] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 191.974513][ T7270] team0: Port device team_slave_1 added [ 192.337169][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.356223][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.462883][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.494375][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.535657][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.561576][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.572745][ T5845] Bluetooth: hci5: command tx timeout [ 192.584535][ T7343] netlink: 3 bytes leftover after parsing attributes in process `syz.7.350'. [ 192.601049][ T7312] loop0: detected capacity change from 0 to 32768 [ 192.611602][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.651391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.658570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.663182][ T7312] XFS: ikeep mount option is deprecated. [ 192.694772][ T7343] batadv1: entered promiscuous mode [ 192.712478][ T7343] batadv1: entered allmulticast mode [ 192.755911][ T7312] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.920216][ T7312] XFS (loop0): Ending clean mount [ 192.961799][ T7312] XFS (loop0): Quotacheck needed: Please wait. [ 193.131734][ T7270] hsr_slave_0: entered promiscuous mode [ 193.320232][ T7270] hsr_slave_1: entered promiscuous mode [ 193.340484][ T7312] XFS (loop0): Quotacheck: Done. [ 193.451942][ T7270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.459576][ T7270] Cannot create hsr debugfs directory [ 193.691428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.698769][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.832839][ T5833] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 194.589481][ T29] audit: type=1804 audit(1739158072.344:44): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.360" name="/newroot/55/file0" dev="tmpfs" ino=326 res=1 errno=0 [ 194.600085][ T7270] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.649807][ T7270] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.658492][ T5843] Bluetooth: hci5: command tx timeout [ 194.684691][ T7270] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.731408][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.738645][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.780851][ T7270] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 195.000899][ T7270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.043064][ T7270] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.069141][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.076343][ T6914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.112334][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.119561][ T6914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.191208][ T7270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.382856][ T7401] loop0: detected capacity change from 0 to 2048 [ 195.544476][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.771495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.778716][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.959298][ T7406] cgroup: name respecified [ 196.098552][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.732265][ T5843] Bluetooth: hci5: command tx timeout [ 196.740230][ T29] audit: type=1326 audit(1739158074.484:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 196.811612][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.819010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 196.871059][ T29] audit: type=1326 audit(1739158074.494:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 196.933344][ T29] audit: type=1326 audit(1739158074.494:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a0bb8ed07 code=0x7ffc0000 [ 196.965519][ T7270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.977754][ T7425] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 197.018301][ T29] audit: type=1326 audit(1739158074.494:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.093920][ T29] audit: type=1326 audit(1739158074.494:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.134179][ T7428] tipc: Started in network mode [ 197.159658][ T7428] tipc: Node identity 7f000001, cluster identity 4711 [ 197.185697][ T7428] tipc: Enabled bearer , priority 10 [ 197.213889][ T29] audit: type=1326 audit(1739158074.494:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.244233][ T7428] tipc: Enabled bearer , priority 0 [ 197.303832][ T29] audit: type=1326 audit(1739158074.494:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.446307][ T29] audit: type=1326 audit(1739158074.534:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.512633][ T29] audit: type=1326 audit(1739158074.534:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.0.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0bb8cde9 code=0x7ffc0000 [ 197.673903][ T7441] overlayfs: statfs failed on './file0' [ 197.851468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 197.858708][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.230743][ T7450] loop4: detected capacity change from 0 to 64 [ 198.372990][ T9] tipc: Node number set to 2130706433 [ 198.811092][ T6882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.891410][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.898887][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.977669][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.985384][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.214961][ T6882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.308527][ T7270] veth0_vlan: entered promiscuous mode [ 199.358662][ T7270] veth1_vlan: entered promiscuous mode [ 199.466542][ T6882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.931395][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.938737][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.202869][ T6882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.382551][ T7270] veth0_macvtap: entered promiscuous mode [ 200.432433][ T7270] veth1_macvtap: entered promiscuous mode [ 200.516537][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.568859][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.608723][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.630114][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.643267][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.654806][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.665115][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.680130][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.700848][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.720256][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.739433][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.752052][ T7492] overlayfs: failed to clone upperpath [ 200.816502][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.853449][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.875600][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.900896][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.923988][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.954638][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.971419][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.978735][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.990712][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.013195][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.033068][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.044222][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.055548][ T7270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.066616][ T7270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.089680][ T7270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.135616][ T7270] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.156919][ T7270] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.181567][ T7270] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.225987][ T7270] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.619738][ T6882] bridge_slave_1: left allmulticast mode [ 201.636040][ T6882] bridge_slave_1: left promiscuous mode [ 201.925427][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.987104][ T6882] bridge_slave_0: left allmulticast mode [ 201.992898][ T6882] bridge_slave_0: left promiscuous mode [ 201.999471][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.011400][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.018596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.051384][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.058605][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.077234][ T968] IPVS: starting estimator thread 0... [ 203.183760][ T7521] IPVS: using max 16 ests per chain, 38400 per kthread [ 204.093071][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.100271][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.013855][ T6882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.080343][ T6882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.105865][ T6882] bond0 (unregistering): Released all slaves [ 205.131378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.138581][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.172148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.179380][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.901968][ T6897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.909869][ T6897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.211411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.218631][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.275572][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.293225][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.423903][ T7552] loop2: detected capacity change from 0 to 1024 [ 207.501190][ T7552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.659574][ T6882] hsr_slave_0: left promiscuous mode [ 207.677137][ T6882] hsr_slave_1: left promiscuous mode [ 207.696799][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.718637][ T6882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.759978][ T6882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.855367][ T6882] veth1_macvtap: left promiscuous mode [ 207.871333][ T6882] veth0_macvtap: left promiscuous mode [ 207.887659][ T6882] veth1_vlan: left promiscuous mode [ 207.913342][ T6882] veth0_vlan: left promiscuous mode [ 207.946699][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.251393][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.258718][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.370501][ T7574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 208.377520][ T7574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.510349][ T7574] vhci_hcd vhci_hcd.0: Device attached [ 208.711398][ T9] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 208.765768][ T7579] vhci_hcd: connection reset by peer [ 208.776754][ T6896] vhci_hcd: stop threads [ 208.807661][ T6896] vhci_hcd: release socket [ 208.830057][ T6896] vhci_hcd: disconnect device [ 209.295795][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.303064][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.834343][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'. [ 210.142266][ T6882] team0 (unregistering): Port device team_slave_1 removed [ 210.238279][ T6882] team0 (unregistering): Port device team_slave_0 removed [ 210.331411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.338713][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.371389][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.378607][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.317721][ T7634] loop2: detected capacity change from 0 to 256 [ 212.361915][ T7634] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 212.411698][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.418898][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.451419][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.458656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.499637][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 213.602270][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.866677][ T7645] bridge_slave_1 (unregistering): left allmulticast mode [ 213.870952][ T9] vhci_hcd: vhci_device speed not set [ 213.891344][ T7645] bridge_slave_1 (unregistering): left promiscuous mode [ 213.947976][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.055961][ T7658] Bluetooth: (null): Invalid header checksum [ 214.491465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.498985][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.705298][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.719880][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.731003][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.851155][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.859465][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.869191][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.030635][ T25] kernel read not supported for file /video7 (pid: 25 comm: kworker/1:0) [ 215.166794][ T7669] loop2: detected capacity change from 0 to 40427 [ 215.178581][ T7669] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 215.178627][ T7669] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 215.222768][ T7669] F2FS-fs (loop2): invalid crc value [ 215.254137][ T7669] F2FS-fs (loop2): Found nat_bits in checkpoint [ 215.349383][ T7669] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 215.349427][ T7669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.411630][ T7669] syz.2.429: attempt to access beyond end of device [ 215.411630][ T7669] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.429947][ T7669] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 215.517919][ T6876] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 215.537444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.537765][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.664078][ T6876] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.421674][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 216.571388][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.578650][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.697795][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 216.972830][ T5843] Bluetooth: hci1: command tx timeout [ 217.261719][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.399083][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.437159][ T7667] bridge_slave_0: entered allmulticast mode [ 217.482761][ T7667] bridge_slave_0: entered promiscuous mode [ 217.539622][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.575197][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 217.575222][ T29] audit: type=1800 audit(1739158095.334:58): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.436" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 217.602690][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.611415][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.611636][ T7667] bridge_slave_1: entered allmulticast mode [ 217.618641][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.675341][ T7667] bridge_slave_1: entered promiscuous mode [ 217.965079][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.005819][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.085409][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.442'. [ 218.651490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.659059][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.813116][ T29] audit: type=1326 audit(1739158096.574:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7728 comm="syz.7.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025778cde9 code=0x0 [ 218.862726][ T7667] team0: Port device team_slave_0 added [ 219.038119][ T7667] team0: Port device team_slave_1 added [ 219.051558][ T5843] Bluetooth: hci1: command tx timeout [ 219.305728][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.359103][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.481907][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.592718][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.642743][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.691454][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.698697][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 219.759285][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.136275][ T29] audit: type=1800 audit(1739158097.894:60): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.447" name="bus" dev="overlay" ino=509 res=0 errno=0 [ 220.264180][ T7667] hsr_slave_0: entered promiscuous mode [ 220.280959][ T7667] hsr_slave_1: entered promiscuous mode [ 220.300901][ T7667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.337556][ T7667] Cannot create hsr debugfs directory [ 220.375855][ T7773] pimreg: entered allmulticast mode [ 220.732508][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.739790][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.131746][ T5843] Bluetooth: hci1: command tx timeout [ 221.770960][ T7667] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 221.771414][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.784946][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.933286][ T7667] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 222.031496][ T7667] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 222.139798][ T7667] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 222.748207][ T7667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.811409][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.818670][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.211823][ T5843] Bluetooth: hci1: command tx timeout [ 223.256733][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.457'. [ 223.389183][ T7667] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.499968][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.507185][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.589926][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.597192][ T6872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.851496][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.858815][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.029299][ T7667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.589200][ T29] audit: type=1800 audit(1739158102.344:61): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.464" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 224.891418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.899042][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.496907][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.931390][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.939037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.721741][ T7667] veth0_vlan: entered promiscuous mode [ 226.805291][ T7667] veth1_vlan: entered promiscuous mode [ 226.971372][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.978597][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.003692][ T7667] veth0_macvtap: entered promiscuous mode [ 227.029160][ T7667] veth1_macvtap: entered promiscuous mode [ 227.117068][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.585503][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.641399][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.689893][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.701142][ T29] audit: type=1800 audit(1739158105.434:62): pid=7898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.475" name="/" dev="fuse" ino=0 res=0 errno=0 [ 227.851016][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.928941][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.960465][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.008659][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.020719][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.020859][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 228.075110][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.168605][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.207367][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.311739][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.363287][ T7915] loop4: detected capacity change from 0 to 256 [ 228.370368][ T7915] vfat: Bad value for 'fmask' [ 228.390788][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.454710][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.537972][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.589146][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.617657][ T7918] overlayfs: failed to clone upperpath [ 228.646717][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.724195][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.881359][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.898866][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.983117][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.036287][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.051631][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.058826][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.104590][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.171393][ T7667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.233538][ T7667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.297856][ T7667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.337643][ T7667] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.370480][ T7667] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.421771][ T7667] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.451825][ T7667] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.743571][ T6919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.765511][ T29] audit: type=1800 audit(1739158107.524:63): pid=7937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.488" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 229.801440][ T6919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.911375][ T6882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.919276][ T6882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.091379][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.098629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.718524][ T7977] loop6: detected capacity change from 0 to 256 [ 230.725273][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.737991][ T7977] vfat: Bad value for 'fmask' [ 230.932533][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 231.086720][ T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 231.131623][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.139196][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.167375][ T29] audit: type=1800 audit(1739158108.924:64): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.493" name="/" dev="fuse" ino=0 res=0 errno=0 [ 231.256914][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 231.504997][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 231.562513][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.570972][ T47] usb 3-1: Product: syz [ 231.615575][ T47] usb 3-1: Manufacturer: syz [ 231.644852][ T47] usb 3-1: SerialNumber: syz [ 231.675578][ T47] usb 3-1: config 0 descriptor?? [ 231.967141][ T47] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 232.016567][ C1] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 232.039878][ T47] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 232.171466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.179065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.226953][ T47] usb 3-1: USB disconnect, device number 4 [ 233.211383][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.218716][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.957075][ T5902] IPVS: starting estimator thread 0... [ 234.051774][ T8020] IPVS: using max 16 ests per chain, 38400 per kthread [ 234.083862][ C1] Unknown status report in ack skb [ 234.251380][ C0] net_ratelimit: 1 callbacks suppressed [ 234.251404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.264415][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.651473][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.291391][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.298732][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.691569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.331449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.338756][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 236.733012][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.274361][ T8082] loop9: detected capacity change from 0 to 128 [ 237.373785][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.571467][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 237.705305][ T5894] kernel read not supported for file /audio1 (pid: 5894 comm: kworker/1:4) [ 237.771641][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 237.788655][ T9] usb 9-1: config 1 has an invalid interface number: 128 but max is 1 [ 237.810954][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.921340][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.930288][ T9] usb 9-1: config 1 has no interface number 0 [ 237.981757][ T9] usb 9-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.039700][ T9] usb 9-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.088657][ T8101] loop9: detected capacity change from 0 to 512 [ 238.101473][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.136139][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.146973][ T8101] EXT4-fs: Ignoring removed nobh option [ 238.186796][ T9] usb 9-1: Product: syz [ 238.202378][ T8101] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.221352][ T9] usb 9-1: Manufacturer: syz [ 238.231759][ T9] usb 9-1: SerialNumber: syz [ 238.254630][ T9] cdc_wdm 9-1:1.128: skipping garbage [ 238.297451][ T9] cdc_wdm 9-1:1.128: cdc-wdm0: USB WDM device [ 238.298436][ T8101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.311370][ T9] cdc_wdm 9-1:1.128: Unknown control protocol [ 238.459450][ T5902] usb 9-1: USB disconnect, device number 2 [ 238.803526][ T7667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.451417][ C0] net_ratelimit: 5 callbacks suppressed [ 239.451444][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.464332][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.848389][ T8139] loop2: detected capacity change from 0 to 1024 [ 239.851395][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.877485][ T5845] block nbd9: Receive control failed (result -32) [ 239.879579][ T8126] block nbd9: shutting down sockets [ 240.132187][ T8139] hfsplus: failed to load root directory [ 240.491428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.498690][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.849250][ T8161] netlink: 'syz.9.543': attribute type 10 has an invalid length. [ 240.864043][ T8161] bridge0: port 3(team0) entered blocking state [ 240.876265][ T8161] bridge0: port 3(team0) entered disabled state [ 240.884670][ T8161] team0: entered allmulticast mode [ 240.889933][ T8161] team_slave_0: entered allmulticast mode [ 240.896343][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 240.904272][ T8161] team_slave_1: entered allmulticast mode [ 240.947129][ T8161] team0: entered promiscuous mode [ 240.952670][ T8161] team_slave_0: entered promiscuous mode [ 240.964281][ T8161] team_slave_1: entered promiscuous mode [ 240.979215][ T8161] bridge0: port 3(team0) entered blocking state [ 240.987270][ T8161] bridge0: port 3(team0) entered forwarding state [ 241.185288][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 241.531376][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.538601][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.820045][ T8172] fuse: Bad value for 'fd' [ 241.931389][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 242.414575][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.9.547'. [ 242.571380][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.321692][ T8205] loop2: detected capacity change from 0 to 128 [ 243.423650][ T8206] syz.2.551: attempt to access beyond end of device [ 243.423650][ T8206] loop2: rw=2049, sector=145, nr_sectors = 384 limit=128 [ 243.581531][ T5902] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 243.782994][ T5902] usb 9-1: config 0 has no interfaces? [ 243.801336][ T5902] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 243.841341][ T5902] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.911627][ T5902] usb 9-1: config 0 descriptor?? [ 243.987849][ T6896] kworker/u8:36: attempt to access beyond end of device [ 243.987849][ T6896] loop2: rw=1, sector=529, nr_sectors = 512 limit=128 [ 244.651379][ C0] net_ratelimit: 5 callbacks suppressed [ 244.651406][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.664344][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.684321][ T5900] usb 9-1: USB disconnect, device number 3 [ 245.053804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 245.691509][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.698763][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.859977][ T8242] loop4: detected capacity change from 0 to 1024 [ 245.966942][ T8242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.091371][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 246.234631][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.245403][ T8259] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.516718][ T8266] loop8: detected capacity change from 0 to 512 [ 246.731437][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.738852][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.131588][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 247.302712][ T8266] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.331428][ T8266] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.604991][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.8.567'. [ 247.771378][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.925911][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.574'. [ 247.964256][ T7270] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.979941][ T8291] overlayfs: failed to get inode (-116) [ 248.021964][ T8291] overlayfs: failed to get inode (-116) [ 248.038500][ T8291] overlayfs: failed to get inode (-116) [ 248.062134][ T8291] overlayfs: failed to get inode (-116) [ 248.538341][ T8308] overlayfs: failed to clone upperpath [ 249.133732][ T5843] block nbd6: Receive control failed (result -32) [ 249.133766][ T5840] block nbd6: Receive control failed (result -32) [ 249.175973][ T8294] block nbd6: shutting down sockets [ 249.851376][ C0] net_ratelimit: 5 callbacks suppressed [ 249.851401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.864304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.251421][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 250.255941][ T8336] netlink: 'syz.7.586': attribute type 4 has an invalid length. [ 250.429819][ T8336] netlink: 'syz.7.586': attribute type 4 has an invalid length. [ 250.491675][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 250.576894][ T8341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.682878][ T5933] usb 3-1: Using ep0 maxpacket: 8 [ 250.741518][ T5933] usb 3-1: config 0 has an invalid interface number: 141 but max is 12 [ 250.791353][ T5933] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 250.831733][ T5933] usb 3-1: config 0 has no interface number 0 [ 250.843199][ T5933] usb 3-1: too many endpoints for config 0 interface 141 altsetting 32: 177, using maximum allowed: 30 [ 250.857473][ T5933] usb 3-1: config 0 interface 141 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 177 [ 250.873345][ T5933] usb 3-1: config 0 interface 141 has no altsetting 0 [ 250.884135][ T5933] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 250.891411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.900476][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.901269][ T5933] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 250.923335][ T5933] usb 3-1: Product: syz [ 250.927638][ T5933] usb 3-1: Manufacturer: syz [ 250.932534][ T5933] usb 3-1: SerialNumber: syz [ 251.291449][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 251.919680][ T5933] usb 3-1: config 0 descriptor?? [ 251.931373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.938643][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.098816][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.9.591'. [ 252.175845][ T8354] netlink: 32 bytes leftover after parsing attributes in process `syz.9.591'. [ 252.234116][ T5933] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 252.331387][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 252.680127][ T5933] gspca_zc3xx: reg_w_i err -71 [ 252.971407][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.291527][ T5933] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 253.334169][ T5933] gspca_zc3xx 3-1:0.141: probe with driver gspca_zc3xx failed with error -71 [ 253.410088][ T5933] usb 3-1: USB disconnect, device number 5 [ 253.823551][ T8384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 254.167470][ T8361] loop8: detected capacity change from 0 to 32768 [ 254.306365][ T8361] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 254.728261][ T29] audit: type=1804 audit(1739158132.484:65): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.592" name="/newroot/28/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 254.835999][ T29] audit: type=1804 audit(1739158132.524:66): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.592" name="/newroot/28/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 254.911385][ T29] audit: type=1804 audit(1739158132.524:67): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.592" name="/newroot/28/file1/file1" dev="loop8" ino=17059 res=1 errno=0 [ 255.051385][ C0] net_ratelimit: 5 callbacks suppressed [ 255.051411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.064291][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.110822][ T7270] ocfs2: Unmounting device (7,8) on (node local) [ 255.290621][ T8411] loop2: detected capacity change from 0 to 1024 [ 255.327039][ T8411] hfsplus: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿQòuÍoV”¹›ÁšiØ“ ×Z¿>×[U~'÷¸Æ?/¬ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ' [ 255.451460][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.091543][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.098726][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.348376][ T8437] loop9: detected capacity change from 0 to 512 [ 256.486538][ T8437] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 256.494905][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 256.539701][ T29] audit: type=1804 audit(1739158134.294:68): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.607" name="/newroot/29/file0" dev="tmpfs" ino=178 res=1 errno=0 [ 256.601808][ T8437] EXT4-fs (loop9): invalid journal inode [ 256.836602][ T8453] loop6: detected capacity change from 0 to 512 [ 257.010769][ T8453] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 257.122040][ T8453] System zones: 0-2, 18-18, 34-34 [ 257.131404][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.138652][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.221789][ T8453] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.614: bg 0: block 248: padding at end of block bitmap is not set [ 257.288846][ T8453] Quota error (device loop6): write_blk: dquota write failed [ 257.299295][ T8453] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 257.323893][ T8453] EXT4-fs error (device loop6): ext4_acquire_dquot:6925: comm syz.6.614: Failed to acquire dquot type 1 [ 257.371563][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 257.461612][ T8453] EXT4-fs (loop6): 1 truncate cleaned up [ 257.468352][ T8453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.531452][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 257.541401][ T8453] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.825977][ T8465] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 258.285348][ T29] audit: type=1326 audit(1739158136.044:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.7.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025778cde9 code=0x7ffc0000 [ 258.370743][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 258.391036][ T8470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.401398][ T29] audit: type=1326 audit(1739158136.084:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.7.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025778cde9 code=0x7ffc0000 [ 258.452424][ T29] audit: type=1326 audit(1739158136.104:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.7.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f025778cde9 code=0x7ffc0000 [ 258.542384][ T6399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.618985][ T29] audit: type=1326 audit(1739158136.104:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8466 comm="syz.7.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f025778cde9 code=0x7ffc0000 [ 258.644375][ T6900] EXT4-fs error (device loop6): ext4_release_dquot:6948: comm kworker/u8:40: Failed to release dquot type 1 [ 258.730505][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 258.789252][ T8479] bridge_slave_1: left allmulticast mode [ 258.821363][ T8479] bridge_slave_1: left promiscuous mode [ 258.827152][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.942066][ T8479] bridge_slave_0: left allmulticast mode [ 258.971262][ T8479] bridge_slave_0: left promiscuous mode [ 258.977095][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.524360][ T8492] loop2: detected capacity change from 0 to 2048 [ 259.645988][ T8492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.251369][ C0] net_ratelimit: 6 callbacks suppressed [ 260.251394][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.251529][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.311100][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.314279][ T8501] loop6: detected capacity change from 0 to 128 [ 260.315499][ T8499] syz.8.625: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.315793][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.8.625 Not tainted 6.14.0-rc2-syzkaller #0 [ 260.315835][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 260.315857][ T8499] Call Trace: [ 260.315868][ T8499] [ 260.315881][ T8499] dump_stack_lvl+0x16c/0x1f0 [ 260.315932][ T8499] warn_alloc+0x24d/0x3a0 [ 260.316001][ T8499] ? __pfx_warn_alloc+0x10/0x10 [ 260.316058][ T8499] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 260.316098][ T8499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.316175][ T8499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.316238][ T8499] ? kasan_save_stack+0x42/0x60 [ 260.316294][ T8499] ? kasan_save_stack+0x33/0x60 [ 260.316350][ T8499] ? kasan_save_track+0x14/0x30 [ 260.316405][ T8499] ? __kasan_kmalloc+0xaa/0xb0 [ 260.316459][ T8499] ? xskq_create+0x52/0x1d0 [ 260.316517][ T8499] ? do_sock_setsockopt+0x225/0x480 [ 260.316581][ T8499] ? __sys_setsockopt+0x1a0/0x230 [ 260.316630][ T8499] ? __x64_sys_setsockopt+0xbd/0x160 [ 260.316691][ T8499] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 260.316763][ T8499] ? xskq_create+0xfb/0x1d0 [ 260.316831][ T8499] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.316902][ T8499] ? xskq_create+0xfb/0x1d0 [ 260.316961][ T8499] vmalloc_user_noprof+0x6b/0x90 [ 260.317020][ T8499] ? xskq_create+0xfb/0x1d0 [ 260.317078][ T8499] xskq_create+0xfb/0x1d0 [ 260.317139][ T8499] xsk_setsockopt+0x7b7/0xa10 [ 260.317198][ T8499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.317264][ T8499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.317328][ T8499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.317392][ T8499] ? find_held_lock+0x2d/0x110 [ 260.317442][ T8499] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.317501][ T8499] do_sock_setsockopt+0x225/0x480 [ 260.317563][ T8499] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 260.317628][ T8499] ? lock_acquire+0x2f/0xb0 [ 260.317708][ T8499] __sys_setsockopt+0x1a0/0x230 [ 260.317767][ T8499] __x64_sys_setsockopt+0xbd/0x160 [ 260.317818][ T8499] ? do_syscall_64+0x91/0x250 [ 260.317862][ T8499] ? srso_alias_return_thunk+0x5/0xfbef5 [ 260.317926][ T8499] ? lockdep_hardirqs_on+0x7c/0x110 [ 260.317969][ T8499] do_syscall_64+0xcd/0x250 [ 260.318025][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.318081][ T8499] RIP: 0033:0x7febfcf8cde9 [ 260.318111][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.318148][ T8499] RSP: 002b:00007febfadf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.318184][ T8499] RAX: ffffffffffffffda RBX: 00007febfd1a6080 RCX: 00007febfcf8cde9 [ 260.318210][ T8499] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 260.318234][ T8499] RBP: 00007febfd00e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 260.318261][ T8499] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.318286][ T8499] R13: 0000000000000000 R14: 00007febfd1a6080 R15: 00007ffdd4f07e28 [ 260.318333][ T8499] [ 260.318347][ T8499] Mem-Info: [ 260.318361][ T8499] active_anon:21054 inactive_anon:0 isolated_anon:0 [ 260.318361][ T8499] active_file:16212 inactive_file:38406 isolated_file:0 [ 260.318361][ T8499] unevictable:768 dirty:478 writeback:0 [ 260.318361][ T8499] slab_reclaimable:10505 slab_unreclaimable:107228 [ 260.318361][ T8499] mapped:40994 shmem:14529 pagetables:1273 [ 260.318361][ T8499] sec_pagetables:0 bounce:0 [ 260.318361][ T8499] kernel_misc_reclaimable:0 [ 260.318361][ T8499] free:1286567 free_pcp:246 free_cma:0 [ 260.318466][ T8499] Node 0 active_anon:84216kB inactive_anon:0kB active_file:64848kB inactive_file:153552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163976kB dirty:1912kB writeback:0kB shmem:56580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13388kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no [ 260.318569][ T8499] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.318685][ T8499] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.318793][ T8499] lowmem_reserve[]: 0 2487 2487 0 0 [ 260.318872][ T8499] Node 0 DMA32 free:1225276kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:84208kB inactive_anon:0kB active_file:64848kB inactive_file:153452kB unevictable:1536kB writepending:1864kB present:3129332kB managed:2547584kB mlocked:0kB bounce:0kB free_pcp:952kB local_pcp:808kB free_cma:0kB [ 260.318986][ T8499] lowmem_reserve[]: 0 0 0 0 0 [ 260.319068][ T8499] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.319176][ T8499] lowmem_reserve[]: 0 0 0 0 0 [ 260.319254][ T8499] Node 1 Normal free:3905632kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 260.319366][ T8499] lowmem_reserve[]: 0 0 0 0 0 [ 260.319443][ T8499] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.319709][ T8499] Node 0 DMA32: 480*4kB (UM) 197*8kB (UM) 101*16kB (UM) 38*32kB (UME) 21*64kB (UME) 18*128kB (UM) 9*256kB (UM) 7*512kB (UME) 7*1024kB (M) 3*2048kB (UME) 292*4096kB (UM) = 1225208kB [ 260.320066][ T8499] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.320285][ T8499] Node 1 Normal: 220*4kB (UE) 54*8kB (UME) 50*16kB (UME) 193*32kB (UME) 100*64kB (UME) 38*128kB (UME) 20*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 3*2048kB (U) 943*4096kB (M) = 3905632kB [ 260.320641][ T8499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.320674][ T8499] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.320707][ T8499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.320740][ T8499] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.320772][ T8499] 69173 total pagecache pages [ 260.320788][ T8499] 0 pages in swap cache [ 260.320803][ T8499] Free swap = 124684kB [ 260.320818][ T8499] Total swap = 124996kB [ 260.320834][ T8499] 2097051 pages RAM [ 260.320848][ T8499] 0 pages HighMem/MovableOnly [ 260.320863][ T8499] 428497 pages reserved [ 260.320878][ T8499] 0 pages cma reserved [ 260.417051][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.417117][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.454544][ T8501] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.461949][ T8501] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.496522][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 260.496549][ T29] audit: type=1800 audit(1739158138.254:96): pid=8501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.627" name="bus" dev="loop6" ino=12 res=0 errno=0 [ 260.628227][ T8505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 260.651405][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.876646][ T6399] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.136311][ T8516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 261.180929][ T8519] loop6: detected capacity change from 0 to 1024 [ 261.213633][ T8519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.291990][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.292160][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.350574][ T8519] EXT4-fs warning (device loop6): empty_inline_dir:1837: bad inline directory (dir #12) - no `..' [ 261.557890][ T6399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.691450][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 261.825723][ T8532] netlink: 'syz.6.634': attribute type 10 has an invalid length. [ 261.871083][ T8532] team0: Device ipvlan1 failed to register rx_handler [ 262.287336][ T8542] loop2: detected capacity change from 0 to 2048 [ 262.293057][ T8542] EXT4-fs: Ignoring removed bh option [ 262.331616][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.331757][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.371546][ T8542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.731655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 263.205403][ T29] audit: type=1326 audit(1739158140.964:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8555 comm="syz.7.640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f025778cde9 code=0x0 [ 263.311157][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.336159][ T8572] loop8: detected capacity change from 0 to 128 [ 263.371363][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.614937][ T8577] syz.8.643: attempt to access beyond end of device [ 263.614937][ T8577] loop8: rw=2049, sector=145, nr_sectors = 400 limit=128 [ 264.914006][ T8591] loop6: detected capacity change from 0 to 512 [ 265.241961][ T8591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 265.250479][ T8591] System zones: 1-12 [ 265.258399][ T8591] EXT4-fs error (device loop6): ext4_free_branches:1020: inode #11: comm syz.6.645: invalid indirect mapped block 8 (level 2) [ 265.303930][ T8591] EXT4-fs (loop6): 1 truncate cleaned up [ 265.312091][ T8591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.451416][ C0] net_ratelimit: 5 callbacks suppressed [ 265.451443][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.464402][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.524085][ T6870] kworker/u8:12: attempt to access beyond end of device [ 265.524085][ T6870] loop8: rw=1, sector=545, nr_sectors = 496 limit=128 [ 265.622338][ T6399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.851483][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.491558][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.499120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.666555][ T8604] o2cb: This node has not been configured. [ 266.672735][ T8604] o2cb: Cluster check failed. Fix errors before retrying. [ 266.679949][ T8604] (syz.6.651,8604,1):user_dlm_register:674 ERROR: status = -22 [ 266.687605][ T8604] (syz.6.651,8604,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 266.891377][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.531361][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.538718][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 267.931388][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 268.338232][ T8639] loop2: detected capacity change from 0 to 512 [ 268.372172][ T8639] EXT4-fs: Ignoring removed nobh option [ 268.388558][ T8639] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.442549][ T8639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.571382][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.631631][ T8642] netlink: 'syz.6.656': attribute type 5 has an invalid length. [ 269.797184][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.071390][ T29] audit: type=1326 audit(1739158147.824:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 270.186025][ T29] audit: type=1326 audit(1739158147.834:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 270.652973][ C0] net_ratelimit: 5 callbacks suppressed [ 270.653002][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.665884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.051396][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.171401][ T29] audit: type=1326 audit(1739158147.834:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.311363][ T29] audit: type=1326 audit(1739158147.834:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.384509][ T29] audit: type=1326 audit(1739158147.834:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.407946][ T29] audit: type=1326 audit(1739158147.834:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.516242][ T29] audit: type=1326 audit(1739158147.834:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.601384][ T29] audit: type=1326 audit(1739158147.834:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.691399][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.698792][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.761649][ T29] audit: type=1326 audit(1739158147.834:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.849907][ T29] audit: type=1326 audit(1739158147.834:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.8.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 271.978524][ T8700] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.091372][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 272.731380][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.738668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.131368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.435945][ T8734] loop4: detected capacity change from 0 to 512 [ 273.441402][ T5902] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 273.495740][ T8734] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 273.525839][ T8734] System zones: 0-2, 18-18, 34-34 [ 273.636008][ T5902] usb 3-1: Using ep0 maxpacket: 8 [ 274.176832][ T8734] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.676: bg 0: block 248: padding at end of block bitmap is not set [ 274.212270][ T5902] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 274.241614][ T8734] EXT4-fs error (device loop4): ext4_acquire_dquot:6925: comm syz.4.676: Failed to acquire dquot type 1 [ 274.271321][ T5902] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.298946][ T8734] EXT4-fs (loop4): 1 truncate cleaned up [ 274.321266][ T5902] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 274.332995][ T8734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.366067][ T5902] usb 3-1: config 1 has no interface number 0 [ 274.397248][ T5902] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.409338][ T8734] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.448505][ T5902] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.540840][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.570674][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.590942][ T5902] usb 3-1: Product: syz [ 274.617513][ T5902] usb 3-1: Manufacturer: syz [ 274.625818][ T5902] usb 3-1: SerialNumber: syz [ 274.652677][ T5902] cdc_wdm 3-1:1.128: skipping garbage [ 274.675602][ T5902] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 274.707125][ T5902] cdc_wdm 3-1:1.128: Unknown control protocol [ 274.722409][ T8750] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 274.847036][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.862714][ T8561] EXT4-fs error (device loop4): ext4_release_dquot:6948: comm kworker/u8:54: Failed to release dquot type 1 [ 274.953502][ T8756] tipc: Failed to remove unknown binding: 66,1,1/0:2700243010/2700243012 [ 274.977725][ T5902] usb 3-1: USB disconnect, device number 6 [ 275.051598][ T8756] tipc: Failed to remove unknown binding: 66,1,1/0:2700243010/2700243012 [ 275.364072][ T8767] loop4: detected capacity change from 0 to 2048 [ 275.410859][ T8767] udf: Bad value for 'anchor' [ 275.580519][ T8784] wg2: entered promiscuous mode [ 275.621397][ T8784] wg2: entered allmulticast mode [ 275.851378][ C0] net_ratelimit: 6 callbacks suppressed [ 275.851405][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 275.864368][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.251381][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.843064][ T8807] loop2: detected capacity change from 0 to 512 [ 276.891447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.898717][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.959174][ T8807] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 277.005531][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.9.694'. [ 277.101634][ T8807] EXT4-fs (loop2): 1 truncate cleaned up [ 277.170435][ T8807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.291470][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.298656][ T8807] syz.2.693 (pid 8807) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 277.537363][ T8824] tipc: Started in network mode [ 277.565944][ T8824] tipc: Node identity 7f000001, cluster identity 4711 [ 277.610861][ T8824] tipc: Enabled bearer , priority 10 [ 277.681785][ T8829] tipc: Enabled bearer , priority 0 [ 277.732857][ T8832] loop4: detected capacity change from 0 to 512 [ 277.750452][ T8832] EXT4-fs: inline encryption not supported [ 277.754167][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.822364][ T8832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.931373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.938606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.987826][ T8832] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.016210][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 278.016237][ T29] audit: type=1326 audit(1739158155.764:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.175497][ T29] audit: type=1326 audit(1739158155.774:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.331477][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.348806][ T29] audit: type=1326 audit(1739158155.794:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febfcf8ed07 code=0x7ffc0000 [ 278.453597][ T29] audit: type=1326 audit(1739158155.794:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.577473][ T29] audit: type=1326 audit(1739158155.794:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.604887][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.680602][ T29] audit: type=1326 audit(1739158155.794:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.731467][ T5900] tipc: Node number set to 2130706433 [ 278.808125][ T29] audit: type=1326 audit(1739158155.794:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 278.971656][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.989634][ T29] audit: type=1326 audit(1739158155.794:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 279.032501][ T8853] lo speed is unknown, defaulting to 1000 [ 279.051506][ T8853] lo speed is unknown, defaulting to 1000 [ 279.092104][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.706'. [ 279.133671][ T29] audit: type=1326 audit(1739158155.814:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 279.166771][ T29] audit: type=1326 audit(1739158155.814:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.8.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febfcf8cde9 code=0x7ffc0000 [ 279.202514][ T8853] lo speed is unknown, defaulting to 1000 [ 279.240950][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 279.253932][ T8853] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 279.348648][ T8853] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 279.654591][ T8853] lo speed is unknown, defaulting to 1000 [ 279.698472][ T8853] lo speed is unknown, defaulting to 1000 [ 279.793443][ T8853] lo speed is unknown, defaulting to 1000 [ 279.829382][ T8853] lo speed is unknown, defaulting to 1000 [ 279.866823][ T8853] lo speed is unknown, defaulting to 1000 [ 279.972690][ T8853] lo speed is unknown, defaulting to 1000 [ 279.979994][ T8853] lo speed is unknown, defaulting to 1000 [ 280.731036][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 281.051437][ C0] net_ratelimit: 5 callbacks suppressed [ 281.051462][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.064294][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.451463][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.570805][ T8920] loop4: detected capacity change from 0 to 512 [ 281.656629][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.729779][ T8920] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.091369][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.098706][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.491416][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 282.888364][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.995245][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 283.131354][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.138606][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.195247][ T8943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.202202][ T8943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 283.230975][ T8943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.237379][ T8943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 283.276434][ T8943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.283420][ T8943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 283.313981][ T8943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 283.320062][ T8943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 283.350336][ T8943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 283.364748][ T8943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.370844][ T8943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.379681][ T8955] fuse: Bad value for 'fd' [ 283.387033][ T8943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.531456][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.171468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.347421][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 284.347447][ T29] audit: type=1800 audit(1739158162.104:165): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.739" name="bus" dev="overlay" ino=296 res=0 errno=0 [ 285.230620][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 285.291647][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 285.300691][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 285.371942][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.379281][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout [ 285.529372][ T29] audit: type=1326 audit(1739158163.274:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.4.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec4a38cde9 code=0x0 [ 285.579378][ T8993] lo speed is unknown, defaulting to 1000 [ 286.251401][ C0] net_ratelimit: 5 callbacks suppressed [ 286.251428][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.264449][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.651428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.986532][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.749'. [ 287.293221][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.300615][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.307886][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 287.372097][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 287.372163][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 287.461434][ T5843] Bluetooth: hci5: command 0x0c1a tx timeout [ 287.461450][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.691465][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.331364][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.338940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.342342][ T9053] overlayfs: failed to clone upperpath [ 288.731464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.041361][ T29] audit: type=1800 audit(1739158166.794:167): pid=9071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.762" name="bus" dev="tmpfs" ino=626 res=0 errno=0 [ 289.371401][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.531898][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 289.534021][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.550026][ T9087] loop2: detected capacity change from 0 to 512 [ 289.621884][ T9087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 289.676313][ T9087] System zones: 1-12 [ 289.713795][ T9087] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.765: Directory hole found for htree index block 0 [ 289.779345][ T9087] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 289.812461][ T9087] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.765: Directory hole found for htree index block 0 [ 289.861460][ T9087] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 289.896178][ T9087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.090385][ T9087] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.765: Directory hole found for htree index block 0 [ 290.175709][ T9087] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.765: Directory hole found for htree index block 0 [ 290.240172][ T9101] netlink: 108 bytes leftover after parsing attributes in process `syz.2.765'. [ 290.426273][ T9047] loop8: detected capacity change from 0 to 40427 [ 290.549304][ T9047] F2FS-fs (loop8): heap/no_heap options were deprecated [ 290.572664][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.654494][ T9047] F2FS-fs (loop8): invalid crc value [ 290.707864][ T9047] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 291.451644][ C0] net_ratelimit: 5 callbacks suppressed [ 291.451688][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.464984][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.838602][ T9119] loop2: detected capacity change from 0 to 2048 [ 291.851390][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.980682][ T9119] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 292.030843][ T9119] UDF-fs: Scanning with blocksize 512 failed [ 292.064396][ T9119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.491380][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.498716][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.891536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 293.059020][ T9155] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.072576][ T9155] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 293.531408][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.538807][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.931893][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.248223][ T9174] o2cb: This node has not been configured. [ 294.381011][ T9174] o2cb: Cluster check failed. Fix errors before retrying. [ 294.513650][ T9174] (syz.9.787,9174,1):user_dlm_register:674 ERROR: status = -22 [ 294.571948][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.621389][ T9174] (syz.9.787,9174,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 294.680253][ T9179] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 295.096541][ T9196] overlayfs: failed to clone upperpath [ 296.383793][ T9206] loop9: detected capacity change from 0 to 2048 [ 296.502491][ T9206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.651376][ C0] net_ratelimit: 5 callbacks suppressed [ 296.651402][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.664282][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.719152][ T29] audit: type=1800 audit(1739158174.474:168): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.795" name="bus" dev="loop9" ino=18 res=0 errno=0 [ 296.747574][ T9206] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 297.051389][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.123559][ T9220] loop6: detected capacity change from 0 to 32768 [ 297.174996][ T9220] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 297.184144][ T9220] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 297.185397][ T7667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.229692][ T9220] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 297.325047][ T9220] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 297.691414][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.698687][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.091367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.736362][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 298.737706][ T9249] netlink: 24 bytes leftover after parsing attributes in process `syz.7.807'. [ 298.743601][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.131355][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.771371][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.946307][ T9264] loop8: detected capacity change from 0 to 128 [ 299.971478][ T9264] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 300.052830][ T9264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.097596][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.812'. [ 300.163237][ T9269] warning: `syz.4.812' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 301.415288][ T9308] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 301.525095][ T9308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.721140][ T9313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.795489][ T9313] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 301.851532][ C0] net_ratelimit: 6 callbacks suppressed [ 301.851560][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.864491][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.869091][ T9313] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 301.888975][ T9324] loop9: detected capacity change from 0 to 128 [ 302.104160][ T9328] syz.9.823: attempt to access beyond end of device [ 302.104160][ T9328] loop9: rw=2049, sector=145, nr_sectors = 256 limit=128 [ 302.118091][ T9306] sch_tbf: burst 720 is lower than device lo mtu (11337746) ! [ 302.251440][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.485365][ T9335] netlink: 216 bytes leftover after parsing attributes in process `syz.8.825'. [ 302.521493][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.892534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.900074][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.291386][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.379943][ T9350] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 303.422075][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.542815][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.552166][ T9350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.664709][ T9352] bond2: (slave gretap1): making interface the new active one [ 303.701838][ T9352] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 303.931676][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.939175][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.331447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.971381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.051405][ C0] net_ratelimit: 5 callbacks suppressed [ 307.051433][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.064336][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.451364][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.091362][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.098595][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.491367][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.131369][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.138611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.531356][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.171631][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.693488][ T9441] tipc: Resetting bearer [ 310.759271][ T25] lo speed is unknown, defaulting to 1000 [ 312.143263][ T29] audit: type=1800 audit(1739158445.909:169): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.857" name="bus" dev="overlay" ino=416 res=0 errno=0 [ 312.251526][ C0] net_ratelimit: 5 callbacks suppressed [ 312.251555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.264456][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.291317][ T29] audit: type=1800 audit(1739158445.959:170): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.857" name="bus" dev="overlay" ino=416 res=0 errno=0 [ 312.651361][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.291373][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.299246][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.691346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.331376][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.338605][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.622078][ T6914] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.731543][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.199012][ T6914] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.371381][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.471499][ T6914] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.167954][ T6914] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.279680][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.540630][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.575795][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.451417][ C0] net_ratelimit: 5 callbacks suppressed [ 317.451461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.464676][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.510322][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.546632][ T5845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 317.567229][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 317.851346][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.168720][ T9524] lo speed is unknown, defaulting to 1000 [ 318.191856][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.7.877'. [ 318.491366][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.498599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.520576][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.880'. [ 318.891358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.957141][ T9543] overlayfs: failed to clone upperpath [ 318.984611][ T6914] bridge_slave_1: left allmulticast mode [ 319.016602][ T6914] bridge_slave_1: left promiscuous mode [ 319.061457][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.127615][ T6914] bridge_slave_0: left allmulticast mode [ 319.163929][ T6914] bridge_slave_0: left promiscuous mode [ 319.171079][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.330414][ T9555] loop4: detected capacity change from 0 to 512 [ 319.340941][ T9555] EXT4-fs: Ignoring removed orlov option [ 319.507897][ T9555] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 319.517519][ T9555] EXT4-fs warning (device loop4): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 319.532418][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.532557][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.550780][ T9555] EXT4-fs (loop4): mount failed [ 319.895723][ T5845] Bluetooth: hci5: command tx timeout [ 319.931444][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.571445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.856551][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.871810][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.931341][ T5845] Bluetooth: hci5: command tx timeout [ 322.661382][ C0] net_ratelimit: 5 callbacks suppressed [ 322.661412][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.674871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.051358][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.223258][ T12] ================================================================== [ 323.231376][ T12] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x443/0x5a0 [ 323.239048][ T12] Read of size 4 at addr ffff88807dd945d8 by task kworker/u8:1/12 [ 323.246880][ T12] [ 323.249244][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.14.0-rc2-syzkaller #0 [ 323.249286][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 323.249313][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 323.249380][ T12] Call Trace: [ 323.249392][ T12] [ 323.249406][ T12] dump_stack_lvl+0x116/0x1f0 [ 323.249454][ T12] print_report+0xc3/0x620 [ 323.249516][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.249582][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.249646][ T12] ? __phys_addr+0xc6/0x150 [ 323.249687][ T12] kasan_report+0xd9/0x110 [ 323.249749][ T12] ? iov_iter_revert+0x443/0x5a0 [ 323.249795][ T12] ? iov_iter_revert+0x443/0x5a0 [ 323.249847][ T12] iov_iter_revert+0x443/0x5a0 [ 323.249888][ T12] netfs_retry_writes+0x163d/0x1a00 [ 323.249953][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 323.250012][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.250077][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.250141][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 323.250208][ T12] ? __pfx_lock_release+0x10/0x10 [ 323.250262][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.250324][ T12] ? rcu_is_watching+0x12/0xc0 [ 323.250367][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 323.250448][ T12] process_one_work+0x9c8/0x1ba0 [ 323.250509][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 323.250570][ T12] ? __pfx_process_one_work+0x10/0x10 [ 323.250623][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.250691][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.250755][ T12] ? assign_work+0x1a0/0x250 [ 323.250807][ T12] worker_thread+0x6c8/0xf00 [ 323.250877][ T12] ? __pfx_worker_thread+0x10/0x10 [ 323.250933][ T12] kthread+0x3b2/0x750 [ 323.250981][ T12] ? __pfx_kthread+0x10/0x10 [ 323.251028][ T12] ? lock_acquire+0x2f/0xb0 [ 323.251086][ T12] ? __pfx_kthread+0x10/0x10 [ 323.251136][ T12] ret_from_fork+0x48/0x80 [ 323.251190][ T12] ? __pfx_kthread+0x10/0x10 [ 323.251238][ T12] ret_from_fork_asm+0x1a/0x30 [ 323.251293][ T12] [ 323.251306][ T12] [ 323.455784][ T12] Allocated by task 5832: [ 323.460121][ T12] kasan_save_stack+0x33/0x60 [ 323.464844][ T12] kasan_save_track+0x14/0x30 [ 323.469565][ T12] __kasan_kmalloc+0xaa/0xb0 [ 323.474207][ T12] __kmalloc_noprof+0x21c/0x510 [ 323.479122][ T12] xt_replace_table+0x633/0x940 [ 323.484038][ T12] __do_replace+0x1d3/0x9d0 [ 323.488573][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 323.493285][ T12] nf_setsockopt+0x8d/0xf0 [ 323.497729][ T12] ip_setsockopt+0xcb/0xf0 [ 323.502209][ T12] tcp_setsockopt+0xa7/0x100 [ 323.506818][ T12] do_sock_setsockopt+0x225/0x480 [ 323.511976][ T12] __sys_setsockopt+0x1a0/0x230 [ 323.516952][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 323.522109][ T12] do_syscall_64+0xcd/0x250 [ 323.526640][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.532748][ T12] [ 323.535166][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 323.535166][ T12] which belongs to the cache kmalloc-16 of size 16 [ 323.549085][ T12] The buggy address is located 8 bytes to the right of [ 323.549085][ T12] allocated 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 323.563527][ T12] [ 323.565970][ T12] The buggy address belongs to the physical page: [ 323.572499][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807dd94540 pfn:0x7dd94 [ 323.582610][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 323.590272][ T12] page_type: f5(slab) [ 323.594275][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 323.602885][ T12] raw: ffff88807dd94540 0000000080800068 00000000f5000000 0000000000000000 [ 323.611480][ T12] page dumped because: kasan: bad access detected [ 323.617905][ T12] page_owner tracks the page as allocated [ 323.623626][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 323.643412][ T12] post_alloc_hook+0x181/0x1b0 [ 323.648221][ T12] get_page_from_freelist+0xfce/0x2f80 [ 323.653725][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 323.659674][ T12] new_slab+0x94/0x330 [ 323.663874][ T12] ___slab_alloc+0xc5d/0x1720 [ 323.668582][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 323.673989][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 323.679335][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 323.684747][ T12] xt_replace_table+0x1e3/0x940 [ 323.689846][ T12] __do_replace+0x1d3/0x9e0 [ 323.691397][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.694358][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 323.701673][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.706228][ T12] nf_setsockopt+0x8d/0xf0 [ 323.717762][ T12] ipv6_setsockopt+0x135/0x170 [ 323.722568][ T12] tcp_setsockopt+0xa7/0x100 [ 323.727181][ T12] do_sock_setsockopt+0x225/0x480 [ 323.732256][ T12] __sys_setsockopt+0x1a0/0x230 [ 323.737144][ T12] page last free pid 8928 tgid 8928 stack trace: [ 323.743481][ T12] free_frozen_pages+0x6db/0xfb0 [ 323.748458][ T12] __put_partials+0x14c/0x170 [ 323.753165][ T12] qlist_free_all+0x4e/0x120 [ 323.757786][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 323.763284][ T12] __kasan_slab_alloc+0x69/0x90 [ 323.768171][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 323.774019][ T12] proc_alloc_inode+0x25/0x200 [ 323.778822][ T12] alloc_inode+0x60/0x230 [ 323.783176][ T12] new_inode+0x22/0x210 [ 323.787347][ T12] proc_pid_make_inode+0x22/0x160 [ 323.792403][ T12] proc_pident_instantiate+0x85/0x320 [ 323.797953][ T12] proc_pident_lookup+0x226/0x2a0 [ 323.803043][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 323.808204][ T12] path_openat+0x904/0x2d80 [ 323.812752][ T12] do_filp_open+0x20c/0x470 [ 323.817293][ T12] do_sys_openat2+0x17a/0x1e0 [ 323.821993][ T12] [ 323.824320][ T12] Memory state around the buggy address: [ 323.829955][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 323.838036][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 323.846115][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 323.854185][ T12] ^ [ 323.861136][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 323.869243][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 323.877956][ T12] ================================================================== [ 323.951937][ T12] Disabling lock debugging due to kernel taint [ 323.958253][ T12] ================================================================== [ 323.966334][ T12] BUG: KASAN: slab-out-of-bounds in iov_iter_advance+0x652/0x6c0 [ 323.974087][ T12] Read of size 4 at addr ffff88807dd945d8 by task kworker/u8:1/12 [ 323.981909][ T12] [ 323.984242][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 323.984291][ T12] Tainted: [B]=BAD_PAGE [ 323.984303][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 323.984327][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 323.984390][ T12] Call Trace: [ 323.984401][ T12] [ 323.984413][ T12] dump_stack_lvl+0x116/0x1f0 [ 323.984456][ T12] print_report+0xc3/0x620 [ 323.984514][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.984574][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.984633][ T12] ? __phys_addr+0xc6/0x150 [ 323.984671][ T12] kasan_report+0xd9/0x110 [ 323.984726][ T12] ? iov_iter_advance+0x652/0x6c0 [ 323.984764][ T12] ? iov_iter_advance+0x652/0x6c0 [ 323.984803][ T12] iov_iter_advance+0x652/0x6c0 [ 323.984841][ T12] netfs_reissue_write+0x13d/0x240 [ 323.984897][ T12] netfs_retry_writes+0x165a/0x1a00 [ 323.984956][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 323.985011][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.985075][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.985137][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 323.985200][ T12] ? __pfx_lock_release+0x10/0x10 [ 323.985249][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.985306][ T12] ? rcu_is_watching+0x12/0xc0 [ 323.985346][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 323.985422][ T12] process_one_work+0x9c8/0x1ba0 [ 323.985478][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 323.985534][ T12] ? __pfx_process_one_work+0x10/0x10 [ 323.985583][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.985646][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 323.985704][ T12] ? assign_work+0x1a0/0x250 [ 323.985750][ T12] worker_thread+0x6c8/0xf00 [ 323.985806][ T12] ? __pfx_worker_thread+0x10/0x10 [ 323.985855][ T12] kthread+0x3b2/0x750 [ 323.985898][ T12] ? __pfx_kthread+0x10/0x10 [ 323.985939][ T12] ? lock_acquire+0x2f/0xb0 [ 323.985992][ T12] ? __pfx_kthread+0x10/0x10 [ 323.986035][ T12] ret_from_fork+0x48/0x80 [ 323.986089][ T12] ? __pfx_kthread+0x10/0x10 [ 323.986131][ T12] ret_from_fork_asm+0x1a/0x30 [ 323.986182][ T12] [ 323.986193][ T12] [ 324.091337][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.095230][ T12] Allocated by task 5832: [ 324.212558][ T12] kasan_save_stack+0x33/0x60 [ 324.217280][ T12] kasan_save_track+0x14/0x30 [ 324.221992][ T12] __kasan_kmalloc+0xaa/0xb0 [ 324.226623][ T12] __kmalloc_noprof+0x21c/0x510 [ 324.231513][ T12] xt_replace_table+0x633/0x940 [ 324.236395][ T12] __do_replace+0x1d3/0x9d0 [ 324.240934][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 324.245663][ T12] nf_setsockopt+0x8d/0xf0 [ 324.250118][ T12] ip_setsockopt+0xcb/0xf0 [ 324.254600][ T12] tcp_setsockopt+0xa7/0x100 [ 324.259324][ T12] do_sock_setsockopt+0x225/0x480 [ 324.264397][ T12] __sys_setsockopt+0x1a0/0x230 [ 324.269281][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 324.274424][ T12] do_syscall_64+0xcd/0x250 [ 324.278964][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.284899][ T12] [ 324.287227][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 324.287227][ T12] which belongs to the cache kmalloc-16 of size 16 [ 324.301126][ T12] The buggy address is located 8 bytes to the right of [ 324.301126][ T12] allocated 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 324.315823][ T12] [ 324.318152][ T12] The buggy address belongs to the physical page: [ 324.324569][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 324.333349][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 324.340904][ T12] page_type: f5(slab) [ 324.344906][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 324.353510][ T12] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 324.362150][ T12] page dumped because: kasan: bad access detected [ 324.368604][ T12] page_owner tracks the page as allocated [ 324.374333][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 324.394198][ T12] post_alloc_hook+0x181/0x1b0 [ 324.399099][ T12] get_page_from_freelist+0xfce/0x2f80 [ 324.404611][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 324.410578][ T12] new_slab+0x94/0x330 [ 324.414699][ T12] ___slab_alloc+0xc5d/0x1720 [ 324.419412][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 324.424823][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 324.430158][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 324.435519][ T12] xt_replace_table+0x1e3/0x940 [ 324.440929][ T12] __do_replace+0x1d3/0x9e0 [ 324.445459][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 324.450512][ T12] nf_setsockopt+0x8d/0xf0 [ 324.454959][ T12] ipv6_setsockopt+0x135/0x170 [ 324.459745][ T12] tcp_setsockopt+0xa7/0x100 [ 324.464350][ T12] do_sock_setsockopt+0x225/0x480 [ 324.469413][ T12] __sys_setsockopt+0x1a0/0x230 [ 324.474297][ T12] page last free pid 8928 tgid 8928 stack trace: [ 324.480649][ T12] free_frozen_pages+0x6db/0xfb0 [ 324.485645][ T12] __put_partials+0x14c/0x170 [ 324.490369][ T12] qlist_free_all+0x4e/0x120 [ 324.494996][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 324.500494][ T12] __kasan_slab_alloc+0x69/0x90 [ 324.505394][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 324.511249][ T12] proc_alloc_inode+0x25/0x200 [ 324.516053][ T12] alloc_inode+0x60/0x230 [ 324.520505][ T12] new_inode+0x22/0x210 [ 324.524695][ T12] proc_pid_make_inode+0x22/0x160 [ 324.529764][ T12] proc_pident_instantiate+0x85/0x320 [ 324.535276][ T12] proc_pident_lookup+0x226/0x2a0 [ 324.540339][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 324.545568][ T12] path_openat+0x904/0x2d80 [ 324.550194][ T12] do_filp_open+0x20c/0x470 [ 324.554734][ T12] do_sys_openat2+0x17a/0x1e0 [ 324.559432][ T12] [ 324.561757][ T12] Memory state around the buggy address: [ 324.567395][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 324.575467][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 324.583551][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc [ 324.591617][ T12] ^ [ 324.598560][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 324.606634][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 324.614701][ T12] ================================================================== [ 324.624852][ T5845] Bluetooth: hci5: command tx timeout [ 324.630594][ T12] ================================================================== [ 324.638692][ T12] BUG: KASAN: slab-use-after-free in _copy_from_iter+0x1507/0x1560 [ 324.646616][ T12] Read of size 4 at addr ffff88807dd945cc by task kworker/u8:1/12 [ 324.654432][ T12] [ 324.656765][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 324.656812][ T12] Tainted: [B]=BAD_PAGE [ 324.656828][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 324.656852][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 324.656911][ T12] Call Trace: [ 324.656923][ T12] [ 324.656936][ T12] dump_stack_lvl+0x116/0x1f0 [ 324.656979][ T12] print_report+0xc3/0x620 [ 324.657034][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657093][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657150][ T12] ? __phys_addr+0xc6/0x150 [ 324.657188][ T12] kasan_report+0xd9/0x110 [ 324.657243][ T12] ? _copy_from_iter+0x1507/0x1560 [ 324.657280][ T12] ? _copy_from_iter+0x1507/0x1560 [ 324.657320][ T12] _copy_from_iter+0x1507/0x1560 [ 324.657356][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657418][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 324.657455][ T12] ? __pfx__copy_from_iter+0x10/0x10 [ 324.657488][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 324.657526][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657582][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657639][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657695][ T12] ? __phys_addr_symbol+0x30/0x80 [ 324.657729][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.657786][ T12] ? __check_object_size+0x488/0x710 [ 324.657851][ T12] p9pdu_vwritef+0x2d0/0x1cf0 [ 324.657900][ T12] ? p9pdu_writef+0xc4/0x100 [ 324.657942][ T12] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 324.657986][ T12] ? __pfx_p9_tag_alloc+0x10/0x10 [ 324.658018][ T12] ? finish_task_switch.isra.0+0x212/0xcc0 [ 324.658072][ T12] ? rcu_is_watching+0x12/0xc0 [ 324.658109][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658166][ T12] ? rcu_is_watching+0x12/0xc0 [ 324.658201][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658261][ T12] p9_client_prepare_req+0x244/0x4d0 [ 324.658299][ T12] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 324.658335][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658395][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658452][ T12] ? __schedule+0xf4b/0x5890 [ 324.658488][ T12] p9_client_rpc+0x1c3/0xc10 [ 324.658523][ T12] ? _printk+0xc8/0x100 [ 324.658572][ T12] ? __pfx_p9_client_rpc+0x10/0x10 [ 324.658609][ T12] ? __pfx___schedule+0x10/0x10 [ 324.658643][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 324.658694][ T12] ? rcu_is_watching+0x12/0xc0 [ 324.658729][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658785][ T12] ? trace_irq_enable.constprop.0+0xea/0x140 [ 324.658847][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.658911][ T12] p9_client_write+0x31f/0x680 [ 324.658958][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 324.658999][ T12] ? iov_iter_advance+0x652/0x6c0 [ 324.659038][ T12] v9fs_issue_write+0xe4/0x1b0 [ 324.659096][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 324.659156][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.659212][ T12] ? rcu_is_watching+0x12/0xc0 [ 324.659247][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.659306][ T12] netfs_do_issue_write+0x95/0x110 [ 324.659361][ T12] netfs_retry_writes+0x165a/0x1a00 [ 324.659417][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 324.659469][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.659526][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.659587][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 324.659649][ T12] ? __pfx_lock_release+0x10/0x10 [ 324.659698][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.659756][ T12] ? rcu_is_watching+0x12/0xc0 [ 324.659797][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 324.659878][ T12] process_one_work+0x9c8/0x1ba0 [ 324.659933][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 324.659989][ T12] ? __pfx_process_one_work+0x10/0x10 [ 324.660036][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.660098][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.660154][ T12] ? assign_work+0x1a0/0x250 [ 324.660199][ T12] worker_thread+0x6c8/0xf00 [ 324.660253][ T12] ? __pfx_worker_thread+0x10/0x10 [ 324.660301][ T12] kthread+0x3b2/0x750 [ 324.660344][ T12] ? __pfx_kthread+0x10/0x10 [ 324.660384][ T12] ? lock_acquire+0x2f/0xb0 [ 324.660436][ T12] ? __pfx_kthread+0x10/0x10 [ 324.660479][ T12] ret_from_fork+0x48/0x80 [ 324.660527][ T12] ? __pfx_kthread+0x10/0x10 [ 324.660569][ T12] ret_from_fork_asm+0x1a/0x30 [ 324.660618][ T12] [ 324.660629][ T12] [ 324.731349][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.733013][ T12] Allocated by task 5832: [ 324.738211][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.743020][ T12] kasan_save_stack+0x33/0x60 [ 324.743080][ T12] kasan_save_track+0x14/0x30 [ 325.117151][ T12] __kasan_kmalloc+0xaa/0xb0 [ 325.121792][ T12] __kmalloc_noprof+0x21c/0x510 [ 325.126944][ T12] xt_replace_table+0x633/0x940 [ 325.131339][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.131814][ T12] __do_replace+0x1d3/0x9d0 [ 325.143297][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 325.148010][ T12] nf_setsockopt+0x8d/0xf0 [ 325.152467][ T12] ip_setsockopt+0xcb/0xf0 [ 325.156927][ T12] tcp_setsockopt+0xa7/0x100 [ 325.161536][ T12] do_sock_setsockopt+0x225/0x480 [ 325.166602][ T12] __sys_setsockopt+0x1a0/0x230 [ 325.171486][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 325.176628][ T12] do_syscall_64+0xcd/0x250 [ 325.181162][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.187097][ T12] [ 325.189447][ T12] Freed by task 5832: [ 325.193518][ T12] kasan_save_stack+0x33/0x60 [ 325.198663][ T12] kasan_save_track+0x14/0x30 [ 325.203485][ T12] kasan_save_free_info+0x3b/0x60 [ 325.208991][ T12] __kasan_slab_free+0x51/0x70 [ 325.213834][ T12] kfree+0x2c4/0x4d0 [ 325.217770][ T12] kvfree+0x47/0x50 [ 325.222049][ T12] xt_free_table_info+0x18a/0x220 [ 325.227111][ T12] __do_replace+0x75b/0x9d0 [ 325.231648][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 325.236378][ T12] nf_setsockopt+0x8d/0xf0 [ 325.240827][ T12] ip_setsockopt+0xcb/0xf0 [ 325.245310][ T12] tcp_setsockopt+0xa7/0x100 [ 325.249945][ T12] do_sock_setsockopt+0x225/0x480 [ 325.255028][ T12] __sys_setsockopt+0x1a0/0x230 [ 325.259918][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 325.265105][ T12] do_syscall_64+0xcd/0x250 [ 325.269647][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.275581][ T12] [ 325.277909][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 325.277909][ T12] which belongs to the cache kmalloc-16 of size 16 [ 325.291812][ T12] The buggy address is located 12 bytes inside of [ 325.291812][ T12] freed 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 325.305464][ T12] [ 325.308232][ T12] The buggy address belongs to the physical page: [ 325.314648][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 325.323432][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 325.330993][ T12] page_type: f5(slab) [ 325.334992][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 325.343598][ T12] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 325.352203][ T12] page dumped because: kasan: bad access detected [ 325.358632][ T12] page_owner tracks the page as allocated [ 325.364356][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 325.384134][ T12] post_alloc_hook+0x181/0x1b0 [ 325.388952][ T12] get_page_from_freelist+0xfce/0x2f80 [ 325.394459][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 325.400399][ T12] new_slab+0x94/0x330 [ 325.404499][ T12] ___slab_alloc+0xc5d/0x1720 [ 325.409206][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 325.414607][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 325.419947][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 325.425318][ T12] xt_replace_table+0x1e3/0x940 [ 325.430211][ T12] __do_replace+0x1d3/0x9e0 [ 325.434739][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 325.439527][ T12] nf_setsockopt+0x8d/0xf0 [ 325.443968][ T12] ipv6_setsockopt+0x135/0x170 [ 325.448783][ T12] tcp_setsockopt+0xa7/0x100 [ 325.453387][ T12] do_sock_setsockopt+0x225/0x480 [ 325.458452][ T12] __sys_setsockopt+0x1a0/0x230 [ 325.463331][ T12] page last free pid 8928 tgid 8928 stack trace: [ 325.469685][ T12] free_frozen_pages+0x6db/0xfb0 [ 325.474745][ T12] __put_partials+0x14c/0x170 [ 325.479451][ T12] qlist_free_all+0x4e/0x120 [ 325.484079][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 325.489571][ T12] __kasan_slab_alloc+0x69/0x90 [ 325.494456][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 325.500304][ T12] proc_alloc_inode+0x25/0x200 [ 325.505100][ T12] alloc_inode+0x60/0x230 [ 325.509441][ T12] new_inode+0x22/0x210 [ 325.513604][ T12] proc_pid_make_inode+0x22/0x160 [ 325.518749][ T12] proc_pident_instantiate+0x85/0x320 [ 325.524184][ T12] proc_pident_lookup+0x226/0x2a0 [ 325.529247][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 325.534386][ T12] path_openat+0x904/0x2d80 [ 325.538926][ T12] do_filp_open+0x20c/0x470 [ 325.543463][ T12] do_sys_openat2+0x17a/0x1e0 [ 325.548157][ T12] [ 325.550478][ T12] Memory state around the buggy address: [ 325.556109][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 325.564180][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 325.572253][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 325.580319][ T12] ^ [ 325.586743][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 325.594839][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 325.602912][ T12] ================================================================== [ 325.689618][ T12] ================================================================== [ 325.697775][ T12] BUG: KASAN: slab-use-after-free in _copy_from_iter+0x14a2/0x1560 [ 325.705702][ T12] Read of size 8 at addr ffff88807dd945c0 by task kworker/u8:1/12 [ 325.713544][ T12] [ 325.715899][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 325.715963][ T12] Tainted: [B]=BAD_PAGE [ 325.715975][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 325.716001][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 325.716063][ T12] Call Trace: [ 325.716082][ T12] [ 325.716100][ T12] dump_stack_lvl+0x116/0x1f0 [ 325.716147][ T12] print_report+0xc3/0x620 [ 325.716203][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716269][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716327][ T12] ? __phys_addr+0xc6/0x150 [ 325.716365][ T12] kasan_report+0xd9/0x110 [ 325.716421][ T12] ? _copy_from_iter+0x14a2/0x1560 [ 325.716458][ T12] ? _copy_from_iter+0x14a2/0x1560 [ 325.716498][ T12] _copy_from_iter+0x14a2/0x1560 [ 325.716535][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716593][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 325.716629][ T12] ? __pfx__copy_from_iter+0x10/0x10 [ 325.716663][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 325.716701][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716758][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716817][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716875][ T12] ? __phys_addr_symbol+0x30/0x80 [ 325.716909][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.716967][ T12] ? __check_object_size+0x488/0x710 [ 325.717029][ T12] p9pdu_vwritef+0x2d0/0x1cf0 [ 325.717082][ T12] ? p9pdu_writef+0xc4/0x100 [ 325.717125][ T12] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 325.717169][ T12] ? __pfx_p9_tag_alloc+0x10/0x10 [ 325.717202][ T12] ? finish_task_switch.isra.0+0x212/0xcc0 [ 325.717257][ T12] ? rcu_is_watching+0x12/0xc0 [ 325.717292][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.717352][ T12] ? rcu_is_watching+0x12/0xc0 [ 325.717387][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.717450][ T12] p9_client_prepare_req+0x244/0x4d0 [ 325.717488][ T12] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 325.717524][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.717587][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.717646][ T12] ? __schedule+0xf4b/0x5890 [ 325.717682][ T12] p9_client_rpc+0x1c3/0xc10 [ 325.717718][ T12] ? _printk+0xc8/0x100 [ 325.717767][ T12] ? __pfx_p9_client_rpc+0x10/0x10 [ 325.717803][ T12] ? __pfx___schedule+0x10/0x10 [ 325.717836][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 325.717875][ T12] ? rcu_is_watching+0x12/0xc0 [ 325.717911][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.717968][ T12] ? trace_irq_enable.constprop.0+0xea/0x140 [ 325.718026][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718095][ T12] p9_client_write+0x31f/0x680 [ 325.718143][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 325.718184][ T12] ? iov_iter_advance+0x652/0x6c0 [ 325.718223][ T12] v9fs_issue_write+0xe4/0x1b0 [ 325.718283][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 325.718342][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718400][ T12] ? rcu_is_watching+0x12/0xc0 [ 325.718435][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718495][ T12] netfs_do_issue_write+0x95/0x110 [ 325.718551][ T12] netfs_retry_writes+0x165a/0x1a00 [ 325.718608][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 325.718662][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718737][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718798][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 325.718860][ T12] ? __pfx_lock_release+0x10/0x10 [ 325.718910][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.718969][ T12] ? rcu_is_watching+0x12/0xc0 [ 325.719007][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 325.719087][ T12] process_one_work+0x9c8/0x1ba0 [ 325.719142][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 325.719199][ T12] ? __pfx_process_one_work+0x10/0x10 [ 325.719247][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.719312][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 325.719371][ T12] ? assign_work+0x1a0/0x250 [ 325.719416][ T12] worker_thread+0x6c8/0xf00 [ 325.719472][ T12] ? __pfx_worker_thread+0x10/0x10 [ 325.719521][ T12] kthread+0x3b2/0x750 [ 325.719564][ T12] ? __pfx_kthread+0x10/0x10 [ 325.719607][ T12] ? lock_acquire+0x2f/0xb0 [ 325.719659][ T12] ? __pfx_kthread+0x10/0x10 [ 325.719702][ T12] ret_from_fork+0x48/0x80 [ 325.719750][ T12] ? __pfx_kthread+0x10/0x10 [ 325.719793][ T12] ret_from_fork_asm+0x1a/0x30 [ 325.719844][ T12] [ 325.719855][ T12] [ 325.771344][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.772546][ T12] Allocated by task 5832: [ 326.162004][ T12] kasan_save_stack+0x33/0x60 [ 326.166909][ T12] kasan_save_track+0x14/0x30 [ 326.171804][ T12] __kasan_kmalloc+0xaa/0xb0 [ 326.176429][ T12] __kmalloc_noprof+0x21c/0x510 [ 326.181318][ T12] xt_replace_table+0x633/0x940 [ 326.186195][ T12] __do_replace+0x1d3/0x9d0 [ 326.190720][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 326.195423][ T12] nf_setsockopt+0x8d/0xf0 [ 326.199970][ T12] ip_setsockopt+0xcb/0xf0 [ 326.204416][ T12] tcp_setsockopt+0xa7/0x100 [ 326.209038][ T12] do_sock_setsockopt+0x225/0x480 [ 326.214107][ T12] __sys_setsockopt+0x1a0/0x230 [ 326.218986][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 326.224125][ T12] do_syscall_64+0xcd/0x250 [ 326.228650][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.234575][ T12] [ 326.236897][ T12] Freed by task 5832: [ 326.240873][ T12] kasan_save_stack+0x33/0x60 [ 326.245585][ T12] kasan_save_track+0x14/0x30 [ 326.250296][ T12] kasan_save_free_info+0x3b/0x60 [ 326.255345][ T12] __kasan_slab_free+0x51/0x70 [ 326.260144][ T12] kfree+0x2c4/0x4d0 [ 326.264063][ T12] kvfree+0x47/0x50 [ 326.268072][ T12] xt_free_table_info+0x18a/0x220 [ 326.273123][ T12] __do_replace+0x75b/0x9d0 [ 326.277650][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 326.282350][ T12] nf_setsockopt+0x8d/0xf0 [ 326.286786][ T12] ip_setsockopt+0xcb/0xf0 [ 326.291241][ T12] tcp_setsockopt+0xa7/0x100 [ 326.295845][ T12] do_sock_setsockopt+0x225/0x480 [ 326.300920][ T12] __sys_setsockopt+0x1a0/0x230 [ 326.306369][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 326.311510][ T12] do_syscall_64+0xcd/0x250 [ 326.316042][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.321982][ T12] [ 326.324306][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 326.324306][ T12] which belongs to the cache kmalloc-16 of size 16 [ 326.338226][ T12] The buggy address is located 0 bytes inside of [ 326.338226][ T12] freed 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 326.351870][ T12] [ 326.354286][ T12] The buggy address belongs to the physical page: [ 326.360694][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 326.369561][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 326.377119][ T12] page_type: f5(slab) [ 326.381117][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 326.389723][ T12] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 326.398316][ T12] page dumped because: kasan: bad access detected [ 326.404736][ T12] page_owner tracks the page as allocated [ 326.410474][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 326.430266][ T12] post_alloc_hook+0x181/0x1b0 [ 326.435419][ T12] get_page_from_freelist+0xfce/0x2f80 [ 326.440947][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 326.446891][ T12] new_slab+0x94/0x330 [ 326.450993][ T12] ___slab_alloc+0xc5d/0x1720 [ 326.455717][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 326.461127][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 326.466458][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 326.471788][ T12] xt_replace_table+0x1e3/0x940 [ 326.476701][ T12] __do_replace+0x1d3/0x9e0 [ 326.481326][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 326.486123][ T12] nf_setsockopt+0x8d/0xf0 [ 326.490563][ T12] ipv6_setsockopt+0x135/0x170 [ 326.495374][ T12] tcp_setsockopt+0xa7/0x100 [ 326.499998][ T12] do_sock_setsockopt+0x225/0x480 [ 326.505087][ T12] __sys_setsockopt+0x1a0/0x230 [ 326.510049][ T12] page last free pid 8928 tgid 8928 stack trace: [ 326.516394][ T12] free_frozen_pages+0x6db/0xfb0 [ 326.521370][ T12] __put_partials+0x14c/0x170 [ 326.526086][ T12] qlist_free_all+0x4e/0x120 [ 326.530712][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 326.536215][ T12] __kasan_slab_alloc+0x69/0x90 [ 326.541125][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 326.546979][ T12] proc_alloc_inode+0x25/0x200 [ 326.551783][ T12] alloc_inode+0x60/0x230 [ 326.556133][ T12] new_inode+0x22/0x210 [ 326.560301][ T12] proc_pid_make_inode+0x22/0x160 [ 326.565360][ T12] proc_pident_instantiate+0x85/0x320 [ 326.570790][ T12] proc_pident_lookup+0x226/0x2a0 [ 326.575943][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 326.581085][ T12] path_openat+0x904/0x2d80 [ 326.585722][ T12] do_filp_open+0x20c/0x470 [ 326.590263][ T12] do_sys_openat2+0x17a/0x1e0 [ 326.594968][ T12] [ 326.597295][ T12] Memory state around the buggy address: [ 326.602936][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 326.611561][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 326.619636][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 326.627737][ T12] ^ [ 326.633910][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 326.641995][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 326.650072][ T12] ================================================================== [ 326.676534][ T12] ================================================================== [ 326.684727][ T12] BUG: KASAN: slab-use-after-free in _copy_from_iter+0x14b4/0x1560 [ 326.692644][ T12] Read of size 4 at addr ffff88807dd945c8 by task kworker/u8:1/12 [ 326.700457][ T12] [ 326.702789][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 326.702840][ T12] Tainted: [B]=BAD_PAGE [ 326.702852][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.702876][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 326.702935][ T12] Call Trace: [ 326.702946][ T12] [ 326.702959][ T12] dump_stack_lvl+0x116/0x1f0 [ 326.703002][ T12] print_report+0xc3/0x620 [ 326.703058][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703116][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703173][ T12] ? __phys_addr+0xc6/0x150 [ 326.703210][ T12] kasan_report+0xd9/0x110 [ 326.703264][ T12] ? _copy_from_iter+0x14b4/0x1560 [ 326.703301][ T12] ? _copy_from_iter+0x14b4/0x1560 [ 326.703340][ T12] _copy_from_iter+0x14b4/0x1560 [ 326.703378][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 326.703413][ T12] ? __pfx__copy_from_iter+0x10/0x10 [ 326.703446][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 326.703484][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703540][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703598][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703655][ T12] ? __phys_addr_symbol+0x30/0x80 [ 326.703688][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.703744][ T12] ? __check_object_size+0x488/0x710 [ 326.703812][ T12] p9pdu_vwritef+0x2d0/0x1cf0 [ 326.703861][ T12] ? p9pdu_writef+0xc4/0x100 [ 326.703903][ T12] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 326.703947][ T12] ? __pfx_p9_tag_alloc+0x10/0x10 [ 326.703979][ T12] ? finish_task_switch.isra.0+0x212/0xcc0 [ 326.704032][ T12] ? rcu_is_watching+0x12/0xc0 [ 326.704068][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704126][ T12] ? rcu_is_watching+0x12/0xc0 [ 326.704161][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704223][ T12] p9_client_prepare_req+0x244/0x4d0 [ 326.704261][ T12] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 326.704297][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704357][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704415][ T12] ? __schedule+0xf4b/0x5890 [ 326.704451][ T12] p9_client_rpc+0x1c3/0xc10 [ 326.704485][ T12] ? _printk+0xc8/0x100 [ 326.704534][ T12] ? __pfx_p9_client_rpc+0x10/0x10 [ 326.704570][ T12] ? __pfx___schedule+0x10/0x10 [ 326.704604][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 326.704641][ T12] ? rcu_is_watching+0x12/0xc0 [ 326.704676][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704733][ T12] ? trace_irq_enable.constprop.0+0xea/0x140 [ 326.704791][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.704860][ T12] p9_client_write+0x31f/0x680 [ 326.704908][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 326.704949][ T12] ? iov_iter_advance+0x652/0x6c0 [ 326.704988][ T12] v9fs_issue_write+0xe4/0x1b0 [ 326.705047][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 326.705106][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.705162][ T12] ? rcu_is_watching+0x12/0xc0 [ 326.705197][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.705258][ T12] netfs_do_issue_write+0x95/0x110 [ 326.705313][ T12] netfs_retry_writes+0x165a/0x1a00 [ 326.705370][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 326.705423][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.705481][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.705541][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 326.705602][ T12] ? __pfx_lock_release+0x10/0x10 [ 326.705650][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.705707][ T12] ? rcu_is_watching+0x12/0xc0 [ 326.705746][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 326.705830][ T12] process_one_work+0x9c8/0x1ba0 [ 326.705885][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 326.705941][ T12] ? __pfx_process_one_work+0x10/0x10 [ 326.705988][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.706051][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 326.706108][ T12] ? assign_work+0x1a0/0x250 [ 326.706153][ T12] worker_thread+0x6c8/0xf00 [ 326.706208][ T12] ? __pfx_worker_thread+0x10/0x10 [ 326.706256][ T12] kthread+0x3b2/0x750 [ 326.706298][ T12] ? __pfx_kthread+0x10/0x10 [ 326.706339][ T12] ? lock_acquire+0x2f/0xb0 [ 326.706390][ T12] ? __pfx_kthread+0x10/0x10 [ 326.706433][ T12] ret_from_fork+0x48/0x80 [ 326.706479][ T12] ? __pfx_kthread+0x10/0x10 [ 326.706525][ T12] ret_from_fork_asm+0x1a/0x30 [ 326.706575][ T12] [ 326.706586][ T12] [ 327.129823][ T12] Allocated by task 5832: [ 327.134169][ T12] kasan_save_stack+0x33/0x60 [ 327.138891][ T12] kasan_save_track+0x14/0x30 [ 327.143604][ T12] __kasan_kmalloc+0xaa/0xb0 [ 327.148236][ T12] __kmalloc_noprof+0x21c/0x510 [ 327.153155][ T12] xt_replace_table+0x633/0x940 [ 327.158040][ T12] __do_replace+0x1d3/0x9d0 [ 327.162578][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 327.167463][ T12] nf_setsockopt+0x8d/0xf0 [ 327.171914][ T12] ip_setsockopt+0xcb/0xf0 [ 327.176366][ T12] tcp_setsockopt+0xa7/0x100 [ 327.181102][ T12] do_sock_setsockopt+0x225/0x480 [ 327.186278][ T12] __sys_setsockopt+0x1a0/0x230 [ 327.191255][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 327.196464][ T12] do_syscall_64+0xcd/0x250 [ 327.200998][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.206930][ T12] [ 327.209279][ T12] Freed by task 5832: [ 327.213277][ T12] kasan_save_stack+0x33/0x60 [ 327.218005][ T12] kasan_save_track+0x14/0x30 [ 327.222750][ T12] kasan_save_free_info+0x3b/0x60 [ 327.227808][ T12] __kasan_slab_free+0x51/0x70 [ 327.232696][ T12] kfree+0x2c4/0x4d0 [ 327.236627][ T12] kvfree+0x47/0x50 [ 327.240462][ T12] xt_free_table_info+0x18a/0x220 [ 327.245514][ T12] __do_replace+0x75b/0x9d0 [ 327.250054][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 327.254776][ T12] nf_setsockopt+0x8d/0xf0 [ 327.259217][ T12] ip_setsockopt+0xcb/0xf0 [ 327.263666][ T12] tcp_setsockopt+0xa7/0x100 [ 327.268280][ T12] do_sock_setsockopt+0x225/0x480 [ 327.273341][ T12] __sys_setsockopt+0x1a0/0x230 [ 327.278265][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 327.283406][ T12] do_syscall_64+0xcd/0x250 [ 327.287934][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.293867][ T12] [ 327.296226][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 327.296226][ T12] which belongs to the cache kmalloc-16 of size 16 [ 327.310127][ T12] The buggy address is located 8 bytes inside of [ 327.310127][ T12] freed 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 327.323685][ T12] [ 327.326015][ T12] The buggy address belongs to the physical page: [ 327.332434][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 327.341209][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 327.348793][ T12] page_type: f5(slab) [ 327.352795][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 327.361626][ T12] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 327.370226][ T12] page dumped because: kasan: bad access detected [ 327.376650][ T12] page_owner tracks the page as allocated [ 327.382374][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 327.402305][ T12] post_alloc_hook+0x181/0x1b0 [ 327.407155][ T12] get_page_from_freelist+0xfce/0x2f80 [ 327.412676][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 327.418615][ T12] new_slab+0x94/0x330 [ 327.422737][ T12] ___slab_alloc+0xc5d/0x1720 [ 327.427449][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 327.432853][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 327.438203][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 327.443612][ T12] xt_replace_table+0x1e3/0x940 [ 327.448499][ T12] __do_replace+0x1d3/0x9e0 [ 327.453026][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 327.457821][ T12] nf_setsockopt+0x8d/0xf0 [ 327.462283][ T12] ipv6_setsockopt+0x135/0x170 [ 327.467095][ T12] tcp_setsockopt+0xa7/0x100 [ 327.471703][ T12] do_sock_setsockopt+0x225/0x480 [ 327.476791][ T12] __sys_setsockopt+0x1a0/0x230 [ 327.481674][ T12] page last free pid 8928 tgid 8928 stack trace: [ 327.488008][ T12] free_frozen_pages+0x6db/0xfb0 [ 327.493016][ T12] __put_partials+0x14c/0x170 [ 327.497802][ T12] qlist_free_all+0x4e/0x120 [ 327.502434][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 327.507936][ T12] __kasan_slab_alloc+0x69/0x90 [ 327.512827][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 327.518756][ T12] proc_alloc_inode+0x25/0x200 [ 327.523550][ T12] alloc_inode+0x60/0x230 [ 327.527891][ T12] new_inode+0x22/0x210 [ 327.532076][ T12] proc_pid_make_inode+0x22/0x160 [ 327.537142][ T12] proc_pident_instantiate+0x85/0x320 [ 327.542542][ T12] proc_pident_lookup+0x226/0x2a0 [ 327.547594][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 327.552729][ T12] path_openat+0x904/0x2d80 [ 327.557261][ T12] do_filp_open+0x20c/0x470 [ 327.561828][ T12] do_sys_openat2+0x17a/0x1e0 [ 327.566526][ T12] [ 327.568848][ T12] Memory state around the buggy address: [ 327.574482][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 327.582553][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 327.590623][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 327.598699][ T12] ^ [ 327.605120][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 327.613196][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 327.621267][ T12] ================================================================== [ 327.630009][ T5845] Bluetooth: hci5: command tx timeout [ 327.682910][ T12] ================================================================== [ 327.690398][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.895'. [ 327.691103][ T12] BUG: KASAN: wild-memory-access in _copy_from_iter+0x8a2/0x1560 [ 327.707601][ T12] Read of size 177 at addr ffe7289f8d074b50 by task kworker/u8:1/12 [ 327.715788][ T12] [ 327.718135][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 327.718190][ T12] Tainted: [B]=BAD_PAGE [ 327.718204][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 327.718231][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 327.718298][ T12] Call Trace: [ 327.718310][ T12] [ 327.718324][ T12] dump_stack_lvl+0x116/0x1f0 [ 327.718373][ T12] kasan_report+0xd9/0x110 [ 327.718438][ T12] ? _copy_from_iter+0x8a2/0x1560 [ 327.718480][ T12] ? _copy_from_iter+0x8a2/0x1560 [ 327.718524][ T12] kasan_check_range+0xef/0x1a0 [ 327.718571][ T12] __asan_memcpy+0x23/0x60 [ 327.718624][ T12] _copy_from_iter+0x8a2/0x1560 [ 327.718666][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 327.718728][ T12] ? __pfx__copy_from_iter+0x10/0x10 [ 327.718767][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 327.718809][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.718876][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.718942][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719008][ T12] ? __phys_addr_symbol+0x30/0x80 [ 327.719046][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719118][ T12] ? __check_object_size+0x488/0x710 [ 327.719190][ T12] p9pdu_vwritef+0x2d0/0x1cf0 [ 327.719245][ T12] ? p9pdu_writef+0xc4/0x100 [ 327.719294][ T12] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 327.719344][ T12] ? __pfx_p9_tag_alloc+0x10/0x10 [ 327.719381][ T12] ? finish_task_switch.isra.0+0x212/0xcc0 [ 327.719443][ T12] ? rcu_is_watching+0x12/0xc0 [ 327.719485][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719551][ T12] ? rcu_is_watching+0x12/0xc0 [ 327.719591][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719661][ T12] p9_client_prepare_req+0x244/0x4d0 [ 327.719704][ T12] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 327.719745][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719815][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.719879][ T12] ? __schedule+0xf4b/0x5890 [ 327.719918][ T12] p9_client_rpc+0x1c3/0xc10 [ 327.719957][ T12] ? _printk+0xc8/0x100 [ 327.720010][ T12] ? __pfx_p9_client_rpc+0x10/0x10 [ 327.720051][ T12] ? __pfx___schedule+0x10/0x10 [ 327.720096][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 327.720138][ T12] ? rcu_is_watching+0x12/0xc0 [ 327.720176][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.720234][ T12] ? trace_irq_enable.constprop.0+0xea/0x140 [ 327.720292][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.720356][ T12] p9_client_write+0x31f/0x680 [ 327.720404][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 327.720445][ T12] ? iov_iter_advance+0x652/0x6c0 [ 327.720484][ T12] v9fs_issue_write+0xe4/0x1b0 [ 327.720546][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 327.720606][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.720664][ T12] ? rcu_is_watching+0x12/0xc0 [ 327.720700][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.720760][ T12] netfs_do_issue_write+0x95/0x110 [ 327.720819][ T12] netfs_retry_writes+0x165a/0x1a00 [ 327.720877][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 327.720930][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.720989][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.721051][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 327.721119][ T12] ? __pfx_lock_release+0x10/0x10 [ 327.721169][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.721229][ T12] ? rcu_is_watching+0x12/0xc0 [ 327.721268][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 327.721344][ T12] process_one_work+0x9c8/0x1ba0 [ 327.721399][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 327.721455][ T12] ? __pfx_process_one_work+0x10/0x10 [ 327.721504][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.721569][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 327.721626][ T12] ? assign_work+0x1a0/0x250 [ 327.721672][ T12] worker_thread+0x6c8/0xf00 [ 327.721728][ T12] ? __pfx_worker_thread+0x10/0x10 [ 327.721777][ T12] kthread+0x3b2/0x750 [ 327.721820][ T12] ? __pfx_kthread+0x10/0x10 [ 327.721862][ T12] ? lock_acquire+0x2f/0xb0 [ 327.721914][ T12] ? __pfx_kthread+0x10/0x10 [ 327.721957][ T12] ret_from_fork+0x48/0x80 [ 327.722005][ T12] ? __pfx_kthread+0x10/0x10 [ 327.722048][ T12] ret_from_fork_asm+0x1a/0x30 [ 327.722103][ T12] [ 327.722115][ T12] ================================================================== [ 328.196421][ T12] ================================================================== [ 328.204545][ T12] BUG: KASAN: slab-use-after-free in _copy_from_iter+0x13e3/0x1560 [ 328.212489][ T12] Read of size 4 at addr ffff88807dd945c8 by task kworker/u8:1/12 [ 328.220360][ T12] [ 328.222701][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 328.222739][ T12] Tainted: [B]=BAD_PAGE [ 328.222749][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.222769][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 328.222819][ T12] Call Trace: [ 328.222829][ T12] [ 328.222841][ T12] dump_stack_lvl+0x116/0x1f0 [ 328.222877][ T12] print_report+0xc3/0x620 [ 328.222923][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.222971][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223018][ T12] ? __phys_addr+0xc6/0x150 [ 328.223048][ T12] kasan_report+0xd9/0x110 [ 328.223098][ T12] ? _copy_from_iter+0x13e3/0x1560 [ 328.223129][ T12] ? _copy_from_iter+0x13e3/0x1560 [ 328.223160][ T12] _copy_from_iter+0x13e3/0x1560 [ 328.223191][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 328.223221][ T12] ? __pfx__copy_from_iter+0x10/0x10 [ 328.223248][ T12] ? __virt_addr_valid+0x1a4/0x590 [ 328.223279][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223325][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223373][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223420][ T12] ? __phys_addr_symbol+0x30/0x80 [ 328.223447][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223494][ T12] ? __check_object_size+0x488/0x710 [ 328.223545][ T12] p9pdu_vwritef+0x2d0/0x1cf0 [ 328.223585][ T12] ? p9pdu_writef+0xc4/0x100 [ 328.223620][ T12] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 328.223655][ T12] ? __pfx_p9_tag_alloc+0x10/0x10 [ 328.223682][ T12] ? finish_task_switch.isra.0+0x212/0xcc0 [ 328.223726][ T12] ? rcu_is_watching+0x12/0xc0 [ 328.223755][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223802][ T12] ? rcu_is_watching+0x12/0xc0 [ 328.223831][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223881][ T12] p9_client_prepare_req+0x244/0x4d0 [ 328.223912][ T12] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 328.223941][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.223991][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224038][ T12] ? __schedule+0xf4b/0x5890 [ 328.224072][ T12] p9_client_rpc+0x1c3/0xc10 [ 328.224100][ T12] ? _printk+0xc8/0x100 [ 328.224141][ T12] ? __pfx_p9_client_rpc+0x10/0x10 [ 328.224170][ T12] ? __pfx___schedule+0x10/0x10 [ 328.224197][ T12] ? __pfx_vprintk_emit+0x10/0x10 [ 328.224228][ T12] ? rcu_is_watching+0x12/0xc0 [ 328.224257][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224303][ T12] ? trace_irq_enable.constprop.0+0xea/0x140 [ 328.224350][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224402][ T12] p9_client_write+0x31f/0x680 [ 328.224441][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 328.224475][ T12] ? iov_iter_advance+0x652/0x6c0 [ 328.224506][ T12] v9fs_issue_write+0xe4/0x1b0 [ 328.224554][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 328.224603][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224650][ T12] ? rcu_is_watching+0x12/0xc0 [ 328.224678][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224728][ T12] netfs_do_issue_write+0x95/0x110 [ 328.224772][ T12] netfs_retry_writes+0x165a/0x1a00 [ 328.224819][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 328.224863][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224910][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.224960][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 328.225010][ T12] ? __pfx_lock_release+0x10/0x10 [ 328.225050][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.225100][ T12] ? rcu_is_watching+0x12/0xc0 [ 328.225131][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 328.225192][ T12] process_one_work+0x9c8/0x1ba0 [ 328.225237][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 328.225283][ T12] ? __pfx_process_one_work+0x10/0x10 [ 328.225322][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.225374][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 328.225420][ T12] ? assign_work+0x1a0/0x250 [ 328.225457][ T12] worker_thread+0x6c8/0xf00 [ 328.225502][ T12] ? __pfx_worker_thread+0x10/0x10 [ 328.225542][ T12] kthread+0x3b2/0x750 [ 328.225577][ T12] ? __pfx_kthread+0x10/0x10 [ 328.225611][ T12] ? lock_acquire+0x2f/0xb0 [ 328.225654][ T12] ? __pfx_kthread+0x10/0x10 [ 328.225689][ T12] ret_from_fork+0x48/0x80 [ 328.225728][ T12] ? __pfx_kthread+0x10/0x10 [ 328.225763][ T12] ret_from_fork_asm+0x1a/0x30 [ 328.225803][ T12] [ 328.225813][ T12] [ 328.648778][ T12] Allocated by task 5832: [ 328.653112][ T12] kasan_save_stack+0x33/0x60 [ 328.657830][ T12] kasan_save_track+0x14/0x30 [ 328.662544][ T12] __kasan_kmalloc+0xaa/0xb0 [ 328.667168][ T12] __kmalloc_noprof+0x21c/0x510 [ 328.672067][ T12] xt_replace_table+0x633/0x940 [ 328.676952][ T12] __do_replace+0x1d3/0x9d0 [ 328.681487][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 328.686196][ T12] nf_setsockopt+0x8d/0xf0 [ 328.690634][ T12] ip_setsockopt+0xcb/0xf0 [ 328.695115][ T12] tcp_setsockopt+0xa7/0x100 [ 328.699722][ T12] do_sock_setsockopt+0x225/0x480 [ 328.704911][ T12] __sys_setsockopt+0x1a0/0x230 [ 328.709820][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 328.714963][ T12] do_syscall_64+0xcd/0x250 [ 328.719488][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.725437][ T12] [ 328.727762][ T12] Freed by task 5832: [ 328.731744][ T12] kasan_save_stack+0x33/0x60 [ 328.736455][ T12] kasan_save_track+0x14/0x30 [ 328.741162][ T12] kasan_save_free_info+0x3b/0x60 [ 328.746218][ T12] __kasan_slab_free+0x51/0x70 [ 328.751018][ T12] kfree+0x2c4/0x4d0 [ 328.754949][ T12] kvfree+0x47/0x50 [ 328.758870][ T12] xt_free_table_info+0x18a/0x220 [ 328.763919][ T12] __do_replace+0x75b/0x9d0 [ 328.768448][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 328.773155][ T12] nf_setsockopt+0x8d/0xf0 [ 328.777683][ T12] ip_setsockopt+0xcb/0xf0 [ 328.782135][ T12] tcp_setsockopt+0xa7/0x100 [ 328.786744][ T12] do_sock_setsockopt+0x225/0x480 [ 328.791817][ T12] __sys_setsockopt+0x1a0/0x230 [ 328.796698][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 328.802038][ T12] do_syscall_64+0xcd/0x250 [ 328.806593][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.812544][ T12] [ 328.814866][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 328.814866][ T12] which belongs to the cache kmalloc-16 of size 16 [ 328.828762][ T12] The buggy address is located 8 bytes inside of [ 328.828762][ T12] freed 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 328.842332][ T12] [ 328.844657][ T12] The buggy address belongs to the physical page: [ 328.851069][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 328.859846][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 328.867402][ T12] page_type: f5(slab) [ 328.871396][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 328.879994][ T12] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 328.888607][ T12] page dumped because: kasan: bad access detected [ 328.895024][ T12] page_owner tracks the page as allocated [ 328.900753][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 328.920587][ T12] post_alloc_hook+0x181/0x1b0 [ 328.925416][ T12] get_page_from_freelist+0xfce/0x2f80 [ 328.930941][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 328.936878][ T12] new_slab+0x94/0x330 [ 328.940996][ T12] ___slab_alloc+0xc5d/0x1720 [ 328.945703][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 328.951105][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 328.956538][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 328.961857][ T12] xt_replace_table+0x1e3/0x940 [ 328.966747][ T12] __do_replace+0x1d3/0x9e0 [ 328.971277][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 328.976064][ T12] nf_setsockopt+0x8d/0xf0 [ 328.980507][ T12] ipv6_setsockopt+0x135/0x170 [ 328.985291][ T12] tcp_setsockopt+0xa7/0x100 [ 328.989893][ T12] do_sock_setsockopt+0x225/0x480 [ 328.994959][ T12] __sys_setsockopt+0x1a0/0x230 [ 328.999843][ T12] page last free pid 8928 tgid 8928 stack trace: [ 329.006178][ T12] free_frozen_pages+0x6db/0xfb0 [ 329.011155][ T12] __put_partials+0x14c/0x170 [ 329.015862][ T12] qlist_free_all+0x4e/0x120 [ 329.020480][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 329.025971][ T12] __kasan_slab_alloc+0x69/0x90 [ 329.030859][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 329.036707][ T12] proc_alloc_inode+0x25/0x200 [ 329.041540][ T12] alloc_inode+0x60/0x230 [ 329.045903][ T12] new_inode+0x22/0x210 [ 329.050082][ T12] proc_pid_make_inode+0x22/0x160 [ 329.055146][ T12] proc_pident_instantiate+0x85/0x320 [ 329.060554][ T12] proc_pident_lookup+0x226/0x2a0 [ 329.066047][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 329.071191][ T12] path_openat+0x904/0x2d80 [ 329.075736][ T12] do_filp_open+0x20c/0x470 [ 329.080274][ T12] do_sys_openat2+0x17a/0x1e0 [ 329.084979][ T12] [ 329.087301][ T12] Memory state around the buggy address: [ 329.092935][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.101011][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.109096][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 329.117168][ T12] ^ [ 329.123588][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 329.131665][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.139741][ T12] ================================================================== [ 329.148750][ C0] net_ratelimit: 5 callbacks suppressed [ 329.148777][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.161544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.168726][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.197483][ T12] ================================================================== [ 329.205599][ T12] BUG: KASAN: slab-use-after-free in iov_iter_revert+0x443/0x5a0 [ 329.213363][ T12] Read of size 4 at addr ffff88807dd945c8 by task kworker/u8:1/12 [ 329.221182][ T12] [ 329.223542][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 329.223589][ T12] Tainted: [B]=BAD_PAGE [ 329.223601][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 329.223625][ T12] Workqueue: events_unbound netfs_write_collection_worker [ 329.223686][ T12] Call Trace: [ 329.223698][ T12] [ 329.223712][ T12] dump_stack_lvl+0x116/0x1f0 [ 329.223754][ T12] print_report+0xc3/0x620 [ 329.223812][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.223875][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.223932][ T12] ? __phys_addr+0xc6/0x150 [ 329.223969][ T12] kasan_report+0xd9/0x110 [ 329.224024][ T12] ? iov_iter_revert+0x443/0x5a0 [ 329.224060][ T12] ? iov_iter_revert+0x443/0x5a0 [ 329.224099][ T12] iov_iter_revert+0x443/0x5a0 [ 329.224135][ T12] p9_client_write+0x48a/0x680 [ 329.224184][ T12] ? __pfx_p9_client_write+0x10/0x10 [ 329.224225][ T12] ? iov_iter_advance+0x652/0x6c0 [ 329.224263][ T12] v9fs_issue_write+0xe4/0x1b0 [ 329.224325][ T12] ? __pfx_v9fs_issue_write+0x10/0x10 [ 329.224383][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.224440][ T12] ? rcu_is_watching+0x12/0xc0 [ 329.224476][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.224535][ T12] netfs_do_issue_write+0x95/0x110 [ 329.224590][ T12] netfs_retry_writes+0x165a/0x1a00 [ 329.224647][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 329.224702][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.224760][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.224820][ T12] ? __pfx_netfs_retry_writes+0x10/0x10 [ 329.224886][ T12] ? __pfx_lock_release+0x10/0x10 [ 329.224934][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.224990][ T12] ? rcu_is_watching+0x12/0xc0 [ 329.225028][ T12] netfs_write_collection_worker+0x23de/0x37c0 [ 329.225103][ T12] process_one_work+0x9c8/0x1ba0 [ 329.225158][ T12] ? __pfx_netfs_write_collection_worker+0x10/0x10 [ 329.225214][ T12] ? __pfx_process_one_work+0x10/0x10 [ 329.225261][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.225324][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 329.225381][ T12] ? assign_work+0x1a0/0x250 [ 329.225425][ T12] worker_thread+0x6c8/0xf00 [ 329.225481][ T12] ? __pfx_worker_thread+0x10/0x10 [ 329.225528][ T12] kthread+0x3b2/0x750 [ 329.225571][ T12] ? __pfx_kthread+0x10/0x10 [ 329.225612][ T12] ? lock_acquire+0x2f/0xb0 [ 329.225665][ T12] ? __pfx_kthread+0x10/0x10 [ 329.225707][ T12] ret_from_fork+0x48/0x80 [ 329.225755][ T12] ? __pfx_kthread+0x10/0x10 [ 329.225797][ T12] ret_from_fork_asm+0x1a/0x30 [ 329.225850][ T12] [ 329.225862][ T12] [ 329.482715][ T12] Allocated by task 5832: [ 329.487045][ T12] kasan_save_stack+0x33/0x60 [ 329.491764][ T12] kasan_save_track+0x14/0x30 [ 329.496481][ T12] __kasan_kmalloc+0xaa/0xb0 [ 329.501105][ T12] __kmalloc_noprof+0x21c/0x510 [ 329.505989][ T12] xt_replace_table+0x633/0x940 [ 329.510873][ T12] __do_replace+0x1d3/0x9d0 [ 329.515419][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 329.520134][ T12] nf_setsockopt+0x8d/0xf0 [ 329.524579][ T12] ip_setsockopt+0xcb/0xf0 [ 329.529025][ T12] tcp_setsockopt+0xa7/0x100 [ 329.533626][ T12] do_sock_setsockopt+0x225/0x480 [ 329.538708][ T12] __sys_setsockopt+0x1a0/0x230 [ 329.543586][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 329.548723][ T12] do_syscall_64+0xcd/0x250 [ 329.553251][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.559178][ T12] [ 329.561500][ T12] Freed by task 5832: [ 329.565475][ T12] kasan_save_stack+0x33/0x60 [ 329.570185][ T12] kasan_save_track+0x14/0x30 [ 329.574890][ T12] kasan_save_free_info+0x3b/0x60 [ 329.579936][ T12] __kasan_slab_free+0x51/0x70 [ 329.584732][ T12] kfree+0x2c4/0x4d0 [ 329.588653][ T12] kvfree+0x47/0x50 [ 329.592481][ T12] xt_free_table_info+0x18a/0x220 [ 329.597529][ T12] __do_replace+0x75b/0x9d0 [ 329.602142][ T12] do_ipt_set_ctl+0x956/0xbe0 [ 329.606849][ T12] nf_setsockopt+0x8d/0xf0 [ 329.611286][ T12] ip_setsockopt+0xcb/0xf0 [ 329.615735][ T12] tcp_setsockopt+0xa7/0x100 [ 329.620338][ T12] do_sock_setsockopt+0x225/0x480 [ 329.625400][ T12] __sys_setsockopt+0x1a0/0x230 [ 329.630274][ T12] __x64_sys_setsockopt+0xbd/0x160 [ 329.635409][ T12] do_syscall_64+0xcd/0x250 [ 329.639931][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.645859][ T12] [ 329.648184][ T12] The buggy address belongs to the object at ffff88807dd945c0 [ 329.648184][ T12] which belongs to the cache kmalloc-16 of size 16 [ 329.662074][ T12] The buggy address is located 8 bytes inside of [ 329.662074][ T12] freed 16-byte region [ffff88807dd945c0, ffff88807dd945d0) [ 329.675707][ T12] [ 329.678031][ T12] The buggy address belongs to the physical page: [ 329.684443][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dd94 [ 329.693215][ T12] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 329.700785][ T12] page_type: f5(slab) [ 329.704784][ T12] raw: 00fff00000000000 ffff88801b041640 0000000000000000 dead000000000001 [ 329.713649][ T12] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 329.722326][ T12] page dumped because: kasan: bad access detected [ 329.728998][ T12] page_owner tracks the page as allocated [ 329.734712][ T12] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 7667, tgid 7667 (syz-executor), ts 281856700523, free_ts 281847629422 [ 329.754453][ T12] post_alloc_hook+0x181/0x1b0 [ 329.759254][ T12] get_page_from_freelist+0xfce/0x2f80 [ 329.764916][ T12] __alloc_frozen_pages_noprof+0x221/0x2470 [ 329.770851][ T12] new_slab+0x94/0x330 [ 329.774947][ T12] ___slab_alloc+0xc5d/0x1720 [ 329.779671][ T12] __slab_alloc.constprop.0+0x56/0xb0 [ 329.785071][ T12] __kmalloc_node_noprof+0x2f0/0x510 [ 329.790914][ T12] __kvmalloc_node_noprof+0xad/0x1a0 [ 329.796246][ T12] xt_replace_table+0x1e3/0x940 [ 329.801139][ T12] __do_replace+0x1d3/0x9e0 [ 329.805667][ T12] do_ip6t_set_ctl+0x965/0xbf0 [ 329.810462][ T12] nf_setsockopt+0x8d/0xf0 [ 329.814914][ T12] ipv6_setsockopt+0x135/0x170 [ 329.819700][ T12] tcp_setsockopt+0xa7/0x100 [ 329.824305][ T12] do_sock_setsockopt+0x225/0x480 [ 329.829366][ T12] __sys_setsockopt+0x1a0/0x230 [ 329.834331][ T12] page last free pid 8928 tgid 8928 stack trace: [ 329.840657][ T12] free_frozen_pages+0x6db/0xfb0 [ 329.845628][ T12] __put_partials+0x14c/0x170 [ 329.850421][ T12] qlist_free_all+0x4e/0x120 [ 329.855046][ T12] kasan_quarantine_reduce+0x195/0x1e0 [ 329.860537][ T12] __kasan_slab_alloc+0x69/0x90 [ 329.865424][ T12] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 329.871270][ T12] proc_alloc_inode+0x25/0x200 [ 329.876088][ T12] alloc_inode+0x60/0x230 [ 329.880435][ T12] new_inode+0x22/0x210 [ 329.884863][ T12] proc_pid_make_inode+0x22/0x160 [ 329.889917][ T12] proc_pident_instantiate+0x85/0x320 [ 329.895329][ T12] proc_pident_lookup+0x226/0x2a0 [ 329.900424][ T12] lookup_open.isra.0+0x4dc/0x1580 [ 329.905567][ T12] path_openat+0x904/0x2d80 [ 329.910101][ T12] do_filp_open+0x20c/0x470 [ 329.914638][ T12] do_sys_openat2+0x17a/0x1e0 [ 329.919331][ T12] [ 329.921657][ T12] Memory state around the buggy address: [ 329.927292][ T12] ffff88807dd94480: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.935360][ T12] ffff88807dd94500: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.943432][ T12] >ffff88807dd94580: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 329.951503][ T12] ^ [ 329.957919][ T12] ffff88807dd94600: fa fb fc fc 00 00 fc fc 00 00 fc fc 00 00 fc fc [ 329.965989][ T12] ffff88807dd94680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 329.974070][ T12] ================================================================== [ 330.067363][ T6914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.078291][ T6914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.087998][ T6914] bond0 (unregistering): Released all slaves [ 330.171497][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.178672][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.185870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.343081][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 330.460796][ T6914] hsr_slave_0: left promiscuous mode [ 330.468397][ T6914] hsr_slave_1: left promiscuous mode [ 330.474819][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.482293][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.490059][ T6914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.497669][ T6914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.508572][ T6914] veth1_macvtap: left promiscuous mode [ 330.514202][ T6914] veth0_macvtap: left promiscuous mode [ 330.519786][ T6914] veth1_vlan: left promiscuous mode [ 330.525205][ T6914] veth0_vlan: left promiscuous mode [ 330.606812][ T6914] pimreg (unregistering): left allmulticast mode [ 330.758226][ T6914] team0 (unregistering): Port device team_slave_1 removed [ 330.784506][ T6914] team0 (unregistering): Port device team_slave_0 removed [ 330.940045][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.954693][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.964603][ T9524] bridge_slave_0: entered allmulticast mode [ 330.971649][ T9524] bridge_slave_0: entered promiscuous mode [ 331.000769][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.020813][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.028944][ T9524] bridge_slave_1: entered allmulticast mode [ 331.046629][ T9524] bridge_slave_1: entered promiscuous mode [ 331.090033][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.102653][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.179540][ T9524] team0: Port device team_slave_0 added [ 331.187256][ T9524] team0: Port device team_slave_1 added [ 331.211462][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.218458][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.225685][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.237872][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.245289][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.276439][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.306256][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.321603][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.359671][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.420498][ T9524] hsr_slave_0: entered promiscuous mode [ 331.436404][ T9524] hsr_slave_1: entered promiscuous mode [ 331.442701][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.450362][ T9524] Cannot create hsr debugfs directory [ 331.886334][ T9524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 331.922941][ T9524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 331.940384][ T9524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 331.953348][ T9524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.043158][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.062151][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.079006][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.086165][ T6913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.106630][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.113771][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.251349][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 332.338724][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.385765][ T9524] veth0_vlan: entered promiscuous mode [ 332.397215][ T9524] veth1_vlan: entered promiscuous mode [ 332.430115][ T9524] veth0_macvtap: entered promiscuous mode [ 332.450969][ T9524] veth1_macvtap: entered promiscuous mode [ 332.470426][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.483265][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.496264][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.506843][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.517160][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.527886][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.539150][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.551807][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.562283][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.572975][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.583737][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.594816][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.606143][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.640315][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.658372][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.668772][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.679453][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.689951][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.700509][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.710405][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.721624][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.733332][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.744299][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.754321][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.764893][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.776161][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.786312][ T9524] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.796638][ T9524] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.805472][ T9524] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.814248][ T9524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.877579][ T8561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.885782][ T8561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.913873][ T8561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.922922][ T8561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50