last executing test programs: 10m8.77612919s ago: executing program 0 (id=24): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f0000001b40)=[{&(0x7f0000000600)="16f68b", 0x3}], 0x1) writev(r2, &(0x7f0000000180)=[{}], 0x1) 10m7.719235306s ago: executing program 0 (id=30): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) creat(&(0x7f00000006c0)='./file1\x00', 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1017082, &(0x7f0000001c40)={[{@gid_forget}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x4}}, {@umask={'umask', 0x3d, 0x1}}, {@shortad}, {@gid_forget}, {@undelete}, {@uid}, {@lastblock={'lastblock', 0x3d, 0x3ff}}, {@longad}, {@dmode={'dmode', 0x3d, 0x9}}, {@nostrict}, {@partition={'partition', 0x3d, 0x7fffffff}}, {@umask={'umask', 0x3d, 0xffff}}]}, 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./control\x00') 10m4.222913453s ago: executing program 0 (id=35): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 10m3.783229115s ago: executing program 0 (id=37): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 10m3.458446239s ago: executing program 0 (id=38): socket(0x40000000015, 0x5, 0x0) socket$inet(0xa, 0x801, 0x84) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) userfaultfd(0x801) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x80000001, 0xfffffffffffffffd}, 0x0, 0x0) 10m2.792918344s ago: executing program 0 (id=43): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$exfat(0x0, &(0x7f00000001c0)='./bus\x00', 0x84c20, 0x0, 0x0, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 10m1.971748762s ago: executing program 32 (id=43): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$exfat(0x0, &(0x7f00000001c0)='./bus\x00', 0x84c20, 0x0, 0x0, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) 9m37.747813805s ago: executing program 3 (id=114): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000340)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@oldalloc}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@journal_async_commit}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x400000c}, 0x6080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 9m36.899648577s ago: executing program 3 (id=117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a00)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x801, 0xf}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m35.843110072s ago: executing program 3 (id=119): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78fd}], 0x0, 0x0, 0x0}) 9m35.383329168s ago: executing program 3 (id=121): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$eJzs3AucTVX7OPDnWWvtMSROk1yGtdazOcllmSTJJUkuSZIkSW4JSZO8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckvX/TPFXb97f+77/t19+/988389nf2Y9Z+9n7Wef55w5e2/mfNt1aK0mtas3IiL4j+CvP5IAIBYABgJAXgAIAKB8XPm4rPU5JSb9Zzthf64HU690BexK4v5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7HsbNO0Qtfwkn2XP/v+fyzf////CH/+/y+SWWbsl2vKXNcNIOZfTeH+Z2/c//+1gn9lI+5/9pTzwk/uf3YVe6ULYH+lPpd/mN//2UGOf7iG+5+9cf8Zy86u9P3nv3KJuczxQuR/2HNw5MK12V+0vyv9+mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlj2c9pcoALg4vtJ1McYYY4wxxhhj7M/jc1zpChhjjDHGGGOMMfbfD0GABAUBxEAOiIWckAsEAFwNeSAvROAaiINrIR9cB/mhABSEQhAPhaEIaDBggSCEolAMonA9FIcboASUhFJQGhyUgQS4EcrCTVAObobycAtUgFuhIlSCylAFboOqcDtUgzugOtwJNaAm1ILacBfUgbuhLtwD9eBeqA/3IcD90BAegEbwIDSGh6AJPAxN4RFoBs2hBbSEVv91PjS4bP7z0BNegF7QG5KgD/SFF6Ef9IcB8BIMhJdhELwCg+FVSIYhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAeUmACTIS3YRK8A5PhXZgCUyEVpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQ0+hAWwENLhI1gEH0MGLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w/9Xf53RAQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwH+bD/JgfC2JBjMd4LIJF0KBBQsKiWBSjGMXiWBxLYAkshaXQocMETMCyeBOWw3JYHstjBayAFbESVsIqWAWrYlWshtWwOlbHGlgDa2EtvAvvwj5YF+tiPayH9bH+xdtT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIiJ2BE7YifshJ2xM3bBLtgVu2I37I7dM5/PAfgCvoC9sYbog32xL/bD5BwD8CV8CV/GQfgKvoKvYjIOwaH4Gr6Gr+NwPIkjcCSOwlFYVbyFY3AskhiPKZiCE3EiTsJJmFXouzgVU3EaTsfpOANn4kx8H2fjB/gBzsW5OB/TMA0X4EJMx3RchKcwAxfjElyKy3A5LsOVuApX4hpci2twPa7HjbgRN+Nm3IpbcTtux09QAeCnuBt3YzLuxb24D/fhftyPB/AAZmImHsSDeAgP4WE8jEfwCB7FY3gcj+EJPIEn8RSextN4Fs/iOXw2/uvGn5RcnQwiixJKxIgYEStiRS6RS+QWuUUekUdERETEiTiRT+QT+UV+UVAUFPEiXhQRRYQRRpAIYwBAREVUFBfFRQlRQpQSpYQTTiSIBFFWlBXlRDlRXtwiKohbRUVRSbR1VUQVUVW0c9XEHaK6qC5qiJqilqgtaos6oo6oK+qKeqKeqC/qiwbiftFQ9MEB+KDI6kwTMQSbiqHYTDQX8sJvsNZiOLYRbUU78bgYiSOwg2jtEsVToqMYg53E38RYfEZ0EeOxq3hOdBPdRQ/xvOgp2rheoreYjH1EXzEV+4n+YoB4SczAmuJ9nJ2zlnhVJIshYqh4TczH18Vw8YYYIUaKUeJNMVq8JcaIsWKcGC9SxAQxUbwtJol3xGTxrpgipopUMU1MF++JGWKmmCXeF7PFB2KOmCvmifkiTXwoFoiFIl18JBaJj0WGWCyWiKVimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaIT8RO8anYJXaLPeIzsVd8LvaJL8R+8aU4IL4SmeJrcVB8Iw6Jb8Vh8Z04Ir4XR8UxcVz8IE6IH8VJcUqcFmfEWfGTOCd+FueFFyBRCimlkoGMkTlkrMwpc8mrZG4ZXHh2r5Fx8lqZT14n88sCsqAsJONlYVlEammklSRDWVQWk1F5vSwub5AlZElZSpaWTpaRCfJGWVbeJMvJm2V5eYusIG+VFWUlWVlWkbfJqvJ2CZFf91FD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6Cy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeU/zX/7MvmDf9n7RrlJbpZb5Fa5TW6XO+QncqfcKXfJXXKP3CP3yr1yn9wn98v98oA8IDNlpjwoD8pD8pA8LA/LI/KIPCqPyTPyB3lC/ihPylPylDwjz8qz8tyF5wAUKqGkUipQMSqHilU5VS51lcqtrlZ5VF4VUdeoOHWtyqeuU/lVAVVQFVLxqrAqorQyyipSoSqqiqmouh4vvGBUKVVaOVVGJagb/518VVzdoEqokr/Lv1hf0j+or5VqpVqr1qqNaqPaqXaqvWqvOqgOKlElqo6qo+qkOqnOqrPqorqorqqr6qa6qR6qh+qpeqpeqpdKUkmqr3pR9VP91QD1khqoXlaD1CA1WA1WySpZDVVD1TA1TA1Xw9UINUKNUqPUaDVajVFj1Dg1TqWoFDVRTVST1CQ1WU1WU9QUlapS1XQ1Xc1QM9QsNUvNVrPVHDVHzVPzVJpKUwvUApWu0tUitUhlqMVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvcpQm9QmtUVtUdvUNrVD7VA71U61S+1Se9QetVftVfvUPrVf7VcH1AGVqTLVQXVQHVKH1GF1WB1RR9RRdVQdV8fVCXVCnVQn1Wl1Wp1VZ9U5dU6dV+ezTvsCEYhABSqICWKC2CA2yBXkCnIHuYM8QZ4gEkSCuCAuyBdcF+QPCgQFg0JBfFA4KBLowAQ2EBeaHg2uD4oHNwQlgpJBqaB04IIyQUJwY1A2uCkoF9wclA9uCSoEtwYVg0pB5aBKcFtQNbg9qBbcEVQP7gxqBDWDWkHt4K6gTnB3UDe4J6gX3BvUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjQPWgQtg1Z/6vzenyzwmOule+sk3Uf31S/qfrq/HqBf0gP1y3qQfkUP1q/qZD1ED9Wv6WH6dT1cv6FH6JF6lH5Tj9Zv6TF6rB6nx+sUPUFP1G/rSfodPVm/q6foqTpVT9PT9Xt6hp6pZ+n39Wz9gZ6j5+p5er5O0x/qBXqhTtcf6UX6Y52hF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36E71Tf6p36d16j/5M79Wf6336C71ff6kP6K90pv5aH9Tf6EP6W31Yf6eP6O/1UX1MH9c/6BP6R31Sn9Kn9Rl9Vv+kz+mf9Xnts07usz7ejTLKxJgYE2tiTS6Ty+Q2uU0ek8dETMTEmTiTz+Qz+U1+U9AUNPEm3hQxRUwWMmSKmqImaqKmuCluSpgSppQpZZxxJsEkmLKmrClnypnyprypYCqYiqaiqWwqm9vMbeZ2c7u5w9xh7jR3mpqmpqltaps6po6pa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlhWphWppVpbVqbNqaNaWfamfamvelgOphEk2g6mo6mk+lkOpvOpovpYrqarqab6WZ6mB6mp+lpepleJskkmb6mr+ln+pkBZoAZaAaaQWaQGWwGm2STbIaaoWaYGWaGm+FmhBlpRmWdqJq3zBgz1owz402KSTETzUQzyUwyk81kM8VMMakm1Uw3080MM8PMMrPMbDPbzDFzzDwzz6SZNLPALDDpJt0sMotMhskwS8wSs8wsMyvMCrPKrDJrzBqzDtaZDWaD2WQ2mS1mi9lmtpkdZofZaXaaXWaX2WP2mL1mr9ln9pn9Zr85YA6YTJNpDpqD5pA5ZA6bw+aIOWKOmqPmuDluTpgT5qQ5aU6b0+asKXDh89KbWJvT5rJX2dz2apvH5rV/Hxe0hWy8LWyLWG3z2wK/i421toQtaUvZ0tbZMjbB3viHuKKtZCvbKvY2W9Xebqv9Ia5j77Z17T22nr3X1rZ3/S6ub++zDezDtiEigG1uG9uWtol92Da1j9hmtrltYVva9vYJ28E+aRPtU7ajffoP8QK70K6yq+0au9busrvtaXvGHrLf2rP2J9vL9rYD7ct2kH3FDrav2mQ75A/xKPumHW3fsmPsWDvOjv9DPMVOtal2mp1u37Mz7Mw/xGn2Qzvbpts5dq6dZ+f/EmfVlG4/sovsxzbDBrDELrXL7HK7wq68WKvPa9fbDXaj3Wk/tVvsVrvNbrc7Lp4I2912j/3M7rWf24P2G7vffmkP2MM20379S5x1fIftd/aI/d4etcfscfuDPWF/VBezs479B/uzPW+9BUICkqQooBjKQbGUk3LRVZSbrqY8lJcidA3F0bWUj66j/FSAClIhiqfCVIQ0GbJEFFJRKkZRup4ulleKSpOjMpRAN1JZuonK0c1Unm6hCnQrVaRKVJmq0G1UlW6nanQHVac7qQbVpFpUm+6iOnQ31aV7qB7dS/XpPmpA91NDeoAa0YPUmB6iJvQwNaVHqBk1pxbUklrRo9SaHqM21Jba0ePUnp6gDvQkJdJT1JGepk70N+pMz1AXepa60nPUjbpTD3qeetIL1It6UxL1ob70IvWj/jSAXqKB9DINoldoML1KyTSEhtJrNIxep+H0Bo2gkTSK3qTR9BaNobE0jsZTCk2gifQ2TaJ3aDK9S1NoKqXSNJpO79EMmkmz6H2aTR/QHJpL82g+pdGHtIAWUjp9RIvoY8qgxbSEltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjvoE9pJn9Iu2k176DPaS5/TPvqC9tOXdIC+okz6mg7SN3SIvqXD9J3vTd/TUTpGx+kHOkE/0kk6RafpDJ2ln+gc/UznyROEGIpQhioMwpgwRxgb5gxzhVeFucOrwzxh3jASXhPGhdeG+cLrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vD4uHN4QlwpJhqbB06MIyYUJ4Y1g2vCksF94clg9vCSuEt4YVw0rhw/dWCW8Lq4a3h9XCO8Lq4Z1hjbBmWCusHd4V1gnvDuuG94T1wnvDcuF9YYPw/rBh+EDYKHwwbBw+FDYJHw6bho+EzcLmYYuwZdgqfDRsHT4Wtgnbhu3Cx8P24RNhh/DJMDF8KuwYPv3L+vsW/uP1SWGfsG/4Yvhi6P09cl50fjQt+mF0QXRhND36UXRR9ONoRnRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y9T72jnAoRNOOuUCF+NyuFiX0+VyV7nc7mqXx+V1EXeNi3PXunzuOpffFXAFXSEX7wq7Ik4746wjF7qirpiLuutdcXeDK+FKulKutHOujEtwLV0r18q1do+5Nq6ta+ced4+7J9wT7kn3pHvKdXRPu07ub66ze8Z1cc+6Z91zrpvr7nq4511PNyHPr+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ35617muDlunpvn0lyaW+CyzhnT3SK3yGW4DLfELXHL3DK3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t8PtcDvdTrfL5/11UrfX7XP73H633x1wX7lM97U76L5xh9y37rD7zh1x37uj7pg77n5wJ9yP7qQ75U67M+6s+8mdcz+78867lMiEyMTI25FJkXcikyPvRqZEpkZSI9Mi0yPvRWZEZkZmRd6PzI58EJkTmRuZF5kfSYt8GFkQWRhJj3wUWRT5OJIRWRxZElkaWRZZHvG+8JbQF/XFfNRf74v7G3wJX9KX8qW982V8gr/Rl/U3+XL+Zl/e3+Ir+Ft9RV/JV/aP+Ga+uW/hW/pW/lHf2j/m2/i2vp1/3Lf3T/gO/kmf6J/yHf3TvpP/m+/sn/Fd/LO+q3/Od/PdfQ//vO/pX/C9fG+f5Pv4vv5F38/39wP8S36gf9kP8q/4wf5Vn+yH+KH+NT/Mv+6H+zf8CD/Sj4p504++eIkM432Kn+An+rf9JP+On+zf9VPOep/qp/np/j0/w8/0s/z7frb/wM/xc/08P9+n+Q/9Ar/Qp/uP/CL/sc/wiy/eVPYr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/wnfqf/1O/yu/0e/5nf6z/3+/wXfr//0h/wX/lM/7U/6L/xh/y3/rD/zh/x3/uj/pg/7n/wJ/yP/qQ/5U/7M/6s/8mf8z/78/w3a4wxxhhj/5IJl4bi92t+vZ3f5zI54jcb9wWAq7cWyvzt+qwzynX5fx33F/HtIwDwVO+uD15catRI+r/bZkgIis0FuPgvQVli4FK8GNrBE5AIbaHsZevvL7qfpT/On5T0m/mjtwDk+k1OLFyKL83/BQAmXWb+Rx8ftaBCeDruv5h/LkCJYpdycsKleDG0++X+Slso9w/qL9D6n9Sf88sUgDa/yckNl+JL9SfAY/A0JP5uS8YYY4wxxhhj7Ff9ReXOF68/L/6Pz7+/vs26Po9Xl3JywKX4n12fM8YYY4wxxhhj7Mp7pnuPJx9NTGzb+d8fVPt/yvqXB03hv2tmHlx24D3AxUcUAPyHEwJkDeRfeRSb/5J9JV946/z9qmVnfAD/M1r5Zwyu8C8mxhhjjDHG2J/u0kn/7x9XV6ogxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/orvk6Mv02AMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdvd/AgAA//8vzfwg") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 9m34.232675686s ago: executing program 3 (id=124): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xd, r2, 0x2}, 0x10) 9m33.736181366s ago: executing program 3 (id=128): bpf$PROG_LOAD(0x5, 0x0, 0x0) uname(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 9m32.581742825s ago: executing program 33 (id=128): bpf$PROG_LOAD(0x5, 0x0, 0x0) uname(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 8m45.183089562s ago: executing program 1 (id=309): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x1e, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) 8m44.099115291s ago: executing program 1 (id=312): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfff, "711cf65998d09ba01233c4601b021d06f376bcdc75d21971706498fad99a57b9"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 8m43.408809627s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xfffd}}, 0x14) 8m42.876257969s ago: executing program 1 (id=318): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000000)='./file2\x00', 0x2004009, &(0x7f00000004c0)=ANY=[], 0x1, 0x226, &(0x7f0000000800)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigaction(0x12, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 8m41.401395478s ago: executing program 1 (id=323): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 8m38.900396524s ago: executing program 1 (id=334): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x8207, 0x7, 0x200, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x6b6, 0x8, 0x8, 0x51, 0x4, 0x9, 0xa, r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 8m37.379049339s ago: executing program 34 (id=334): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x8207, 0x7, 0x200, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x8, 0x6b6, 0x8, 0x8, 0x51, 0x4, 0x9, 0xa, r0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4086, &(0x7f0000000040)=0xff6) 7m23.007895196s ago: executing program 2 (id=559): mount$binderfs(0x0, 0x0, 0x0, 0x4800, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000300)={0x4}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m21.588169528s ago: executing program 2 (id=562): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) 7m18.06907358s ago: executing program 2 (id=570): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x2, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7m16.864912314s ago: executing program 2 (id=574): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 7m10.536086669s ago: executing program 2 (id=592): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x3000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5a84, &(0x7f0000011bc0)="$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") read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffe8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7m8.832005096s ago: executing program 2 (id=599): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20102) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000100)) 6m53.479096332s ago: executing program 35 (id=599): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x20102) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000100)) 5m5.107209072s ago: executing program 7 (id=848): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) 5m3.829334003s ago: executing program 7 (id=851): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4m57.119647448s ago: executing program 7 (id=859): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0xd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 4m50.708129115s ago: executing program 7 (id=873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0x1, 0xc06620, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) 4m45.368537042s ago: executing program 7 (id=881): r0 = socket(0x2b, 0x80801, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x24, 0x1, 0x8, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback, 0xffffffffffffffff, 0x2c, 0x10, 0x0, @void, @value, @void, @void, r2}, 0x20) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25000000000c00a60007"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4802) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 4m41.647390856s ago: executing program 7 (id=890): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m25.668169147s ago: executing program 36 (id=890): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x48d4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 37.139652032s ago: executing program 5 (id=1269): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7, 0x3b, 0x0, 0xffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') close(0xffffffffffffffff) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dmm32at\x00', [0x9e1, 0x2166, 0x0, 0x100000, 0x88d7, 0x92, 0x1, 0x10, 0x1002, 0xffffffff, 0x3, 0x8, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xe, 0x100, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) clock_gettime(0x0, &(0x7f00000000c0)) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd701004000000040000000800090002"], 0x34}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x10}}, @L2TP_ATTR_MTU={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x2f1a2011b1e553d9) sendfile(r3, r3, 0x0, 0x7f03) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [], {}, [{0x8, 0x1}, {0x8, 0x4}]}, 0x34, 0x0) 36.605226196s ago: executing program 5 (id=1271): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r4}, &(0x7f0000005680), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010ef5d870000000000002180000000000080020000008000100ac1414"], 0x24}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r11, &(0x7f0000003600)=[{{&(0x7f0000000000)={0x2, 0xe21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\a'], 0x50}}], 0x1, 0x40000) write$UHID_INPUT(r10, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 33.510045268s ago: executing program 5 (id=1274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="000b023f3201"], 0x15f) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0xffffffffffffffde, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="9400250600", 0x5}, {0x0}], 0x2, 0x0, 0x0, 0x600}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffb1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, 0x0) 32.078316839s ago: executing program 5 (id=1276): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdb, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xfa5, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0xe, 0x4, 0x7, 0xae, 0x30, 0xb, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1a, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649baf103ce"}, {0x1f, 0x7, "87d186101495d17fbf78583836c2f4f711831637a5c67fdb148b82cd1391968d787c376363838171ab0c3d768f99aeb02aba1d796f311e952e531640c8"}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f053466370"}, {0x2, 0x13, "f69b7b7dbfa77a9e901d09308d3aeb9c5a47d82ad35c5856b91fd7a87990123461c1b1990fd6b44a53e7415d0369efc8b9d3dfa9eef19547cd6c20ad82a900f58b03026a086cd15dff52f2f0c5a8bdfe72599b8b8e39989ea9ba97fa7666e0a45d3385858ef1885dd33bb249e4407f3f2fa50d385e821775bb1dbbd33f2e1fa097b773c80576727bfb80a067a7e6f5ff3cd18499bc8d1b29"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x180, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x30, 0x0, 0x4, {0xa, 0x8, 0x0, @remote, 0x80000}}}, 0x80, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 30.80526053s ago: executing program 5 (id=1279): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x9) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) unshare(0x2040600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 29.459638855s ago: executing program 5 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a8, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgsnd(0x0, 0x0, 0xf1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) 18.96992503s ago: executing program 8 (id=1294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b32, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xd41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = io_uring_setup(0x4355b, &(0x7f0000000140)={0x0, 0xe24b, 0x10, 0x5, 0x4000020}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 17.051518066s ago: executing program 8 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x80000001}, 0x18) socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r7 = landlock_create_ruleset(&(0x7f0000000100)={0x3501}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file4\x00', 0x2a0282, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r8}, 0x0) landlock_restrict_self(r7, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 14.892029563s ago: executing program 8 (id=1299): sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000000280)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='.dead\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, r4, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 14.087783318s ago: executing program 37 (id=1282): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a8, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgsnd(0x0, 0x0, 0xf1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) 8.211394978s ago: executing program 6 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0xe, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x100c1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x7, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{0x0, 0x18}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYBLOB="8e3b1c01d3070e32a2293470c4327c0c809d26357704a625497eb8155fd22de443c66747891a20df01aff7f2e5892c805d4b336f3d56dd96933c03579b3013d4e1b5648c469124e6e771e078d8df25dc4b50531b811896cf59528f5e680999bae73a48732b65178de8ffd11aa5fa58d0a68f4abe167cbe91427b2484a149f88eb60443f6acb4d4627fb9cd6d3642d312409f3b3d83c028941aab31551518551678fb9c6684f2abc3a3c398893d26a9dcbb20a293dbde521ba84dfca2a33b00fe0952a72c5c255e4f1d1bd830cc5f4525caffd49a8d6524"], 0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r7, 0x5f, "8b74dd5ff94cfcef08cb29cab3b1ed7c16c9fada5b13fdeaca5bb952e4319d40ef055a38d76047b5fb83a982a4795dbf6fed2ba795468af35e8deae14156d4c8ca778c776a0de7babd1434947725b3dbe0c8a2265a22ce79679f3f3bc180ce"}, &(0x7f0000000280)=0x67) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe3b) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000500), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, 0x0) r9 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.764914138s ago: executing program 6 (id=1309): ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000029c0)={0x4, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f000070f000/0x1000)=nil, 0x1000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) splice(r2, &(0x7f0000000240)=0x8, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) 6.648109836s ago: executing program 4 (id=1310): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x22380, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x104) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x5000003a, r3, 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(r0, &(0x7f0000002f80)="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", 0x2000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x31, 0xfffffffffffffffc) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="16d60081ab696f4db69ac88117e3cb78ae35a19ad6ef177a909565af550d31502da7f97f7846047ce08da60300a7f76780d7f830103819ff6f634cf9aa20d1e2f53013f38ff554615e156dd0ea35fabbfedaff329074d2a38035f6578212a3f6e536062278b694c112cdae1484ca319c7dd388d61e28a2818c5f42392ad0428c894a0b51f2731726e5a880eab5b244f597a6"]) ptrace(0x10, 0x1) renameat2(r5, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r5, &(0x7f00000002c0)='./file0\x00', 0x2) 5.99045737s ago: executing program 4 (id=1311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100000001692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x200980) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) ftruncate(r3, 0xf09) r5 = dup(0xffffffffffffffff) iopl(0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) tkill(r1, 0x7) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000180)={0x2, 0x6, 0x6}) 5.647745391s ago: executing program 6 (id=1312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0xa4, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, &(0x7f0000004540)) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r3, 0x0, 0x30004001) sendmsg(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="255161fc12e31d068d10d1c2bd39", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x848000000015, 0x805, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) 5.193652397s ago: executing program 8 (id=1313): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000007180), 0x3) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2200, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x2004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000b80)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(0x0, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x280000a, 0x40010, r0, 0xde54c000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, 0x0) socket$can_raw(0x1d, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000000)=0xb, 0x80c00) socket$inet_sctp(0x2, 0x4, 0x84) 4.158612992s ago: executing program 6 (id=1314): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x571, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000740)=ANY=[@ANYBLOB='codepage=cp932,part=0x000000000000007d,umask=00000000000000000000006,iocharset=macceltic,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0020471af9a6c12f192a54d23d4279cdd8438ac4b2bd3012e397ffe7ad8a28f6e2e94065401007144fe56f257e3ac332d57120518c4d6c0cb5a6adacd51628e2cbccd17be53b5a"], 0x4, 0x2e3, &(0x7f0000001980)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000480)) recvmmsg(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000000300)=""/198, 0xc6}], 0x4}, 0x8}], 0x1, 0x40000040, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.15736158s ago: executing program 4 (id=1315): syz_read_part_table(0x107f, &(0x7f0000001f00)="$eJzs0LFNA0EQBdBvdk/GgUUPRIQUQUYGEV2QE5hSSGiDhD6QKIEMhMSg9fkCCgCS95K5m139L234V31z+PioWU/ScnLYPm/HX1pvbzVv7pP1GE9JXqevqkraar9P7l7et+sa5zlKMn1W1a5GWNXqpv+sfjxLz9XF9eVS1uYxLRemzahaZYkbjvfheajaJben57/0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwp74DAAD//0cHI4I=") 3.007962853s ago: executing program 4 (id=1316): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r5, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 1.457257113s ago: executing program 8 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) read(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) connect$unix(r2, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)="28e6ceb00e919b519d9c75d8fcf6370a0e5820a3ab6a48c49f564a91ccef167412e24838a1258d11365ba45a2f25b09276ee5b5f9480a756f4470e00000100efb8c84c471dc9", 0x46}, {&(0x7f00000006c0)="52fad8a2f6e21b15aade9d6f12393327d118219aab8428e0f3480004e52eafe4592e182d4cd7f609834f6214afcceeaacdd3ce254ca8f3f4330db1ee806231cfa98b5736d6f3afbadd8022414c8613ac341b8d1538b6cf5d199b7f2b725c9353de81c0b1e0c8ac5d35b8", 0x6a}, {&(0x7f0000000300)="1b3599cc95cb5e69b24ff9b2fd5b1d69d1f18403cf", 0x15}], 0x3}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="300c9fd7cbdc2b2f231d94cd6d13c6ea067c8650bb37ea7854", 0x19}, {0x0}, {&(0x7f0000000a40)="36cd2e8754949675ce859217975c2835106d2f69c86875be005c950118164e68030330d559da3adbe0fedc3176867f5e9030073470053f9a58842d9ac8f5fef38d", 0x41}, {0x0}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.245100363s ago: executing program 4 (id=1318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setitimer(0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 523.285533ms ago: executing program 6 (id=1319): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='Q', 0x1, 0x200980) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe0000000) ftruncate(0xffffffffffffffff, 0xf09) 312.233512ms ago: executing program 8 (id=1320): r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x0) dup(r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usbip_server_init(0x3) r2 = syz_io_uring_setup(0x12c2, &(0x7f0000000140)={0x0, 0x5eda, 0x10100, 0x1, 0x12a, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x58, 0x2004, @fd, 0x0, 0x0, 0x0, 0x18, 0x1, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) 311.588386ms ago: executing program 4 (id=1321): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdc, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xfa6, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0xe, 0x4, 0x7, 0xae, 0x30, 0xb, [@private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1a, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649baf103ce"}, {0x1f, 0x7, "87d186101495d17fbf78583836c2f4f711831637a5c67fdb148b82cd1391968d787c376363838171ab0c3d768f99aeb02aba1d796f311e952e531640c8"}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703a"}, {0x2, 0x13, "f69b7b7dbfa77a9e901d09308d3aeb9c5a47d82ad35c5856b91fd7a87990123461c1b1990fd6b44a53e7415d0369efc8b9d3dfa9eef19547cd6c20ad82a900f58b03026a086cd15dff52f2f0c5a8bdfe72599b8b8e39989ea9ba97fa7666e0a45d3385858ef1885dd33bb249e4407f3f2fa50d385e821775bb1dbbd33f2e1fa097b773c80576727bfb80a067a7e6f5ff3cd18499bc8d1b29"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x180, "5410d5bc1e896fc2e59af62dc9c810b5bdb94f48e22ee57fe5a39a91aff47de7af78c97c5b5bbe9b6f683afcc4ffec043c7cadcd9c17ef5dcd068126bf0c69c95b98bb208fcb56124b2928cf80977b550d6f46d6d4a6942902311f9aa7153e9a893183603077bd41f20cee2027100120282a6429196ab4f8cbae49cd359a5a4dbc76d6786a518f7d2d9cac75c0b303ccc7c795a59c0977c57a98aca8c99ffee97f9409607d4a3b3ce45d3dae35a8a8e42cff3239107852383b45fc1ac92a03e27904c477dae73279afe7906a1acbe87f8b283b66a8246cb1e4bb8cf4f2b7932c0fcb18316fc3e075e3d3382222e3faaba9c60dc8e1b5c96af5084d47d2f3a165e3fe644aed54de4f10ea361e0c53a7bb7a0ee3b4650c7b0409b30716db4b7211aa49bd51b2ea9bb7dce5f58d81749c3be621d26407e995563a1923d2f73a66cda999af33522b0878bba0413370a44de8098b3ec959ee4d6d870746e3a2c0c59af6a427ba9eda1c06a5feb2c0014efc339ac60207f9ec05d86af785d8643cd8ebb6d335682249b4cb24ce2f0d5148f9b65bbe62ec14b3163610788989f7389c1a52f71823523dfe5d96b143a97599d46526da55ca5aa046135fe2b770efe78e16119169faf9df4998079883ffe85026ddee4bce1c66c79c3c063cfdbaceafada81892ef836106327aaf93aa0e855269cb34a691bac877faa0b294da6b83329c7f43a6d06359b76f9993723634afbbf149f2b40389dd93d9b58688f362e515ee7cb07d46cd775536fc56c1ddbf9b1bc3478e613bc18aae2fdfd1f5d64b4d42810801d6d9b3d21988e484a9429de24be9037042eef33ceef19fc7994f91713d56a1f8de485c52c8b033087d3410acb275835445ed09e9845902a93f9061b47f36acac63425d63b7877441a5f44ad75140156764a1d27f12a681d1a5f5ef1abb12544f17def2b76ac5625f39470a20738ea98a99cdeccae666018eb64cebbfb4345d96a93b854118e138204d03de81f008b74175bb8265add714475166b99a439ee253c5c3396ef545c9d9b3b1be6dd17b7470ad388b8dd9cbac135c3c74ae833ce85f3e070e0403b4defef0430f132b17c87e76e0e0dbabefabde8f8d005eb29e6a4eb62cde700f0d889c16f30e2dcd9579a5ebe3eef1e3071bb7e2b5d0762f48d212a692aa856b2312b20a17f92e48ed2acf0e9ebb689b847decd1f1149084b1cc02d48cdc471b3e018afdb85be418f9d1afdc93ae68cdcdbae60f94105c1ec420cc11979ff4853b35e79fcc12d650bb1cce7fc84a46f90ec18d6577ec843e1eeaaf1797f4fd888b612213d9669367a41be08de038e005d84d69a51ce9cae60e844eb2536cc6e7ed0b0040764e39bbe8ce2499b1357147f14b30a526671a5adcbf8b76dedecb1979fce3765eb70193faf9a1b5b1d7ed852c5542623da9f609ecce6b88d08ac88b36625e5706b20d82e862c3b50861ae4a1713c1b56032f7a242285ae871d9bf2444f744628f7650848f8cb51dd292a60d4c14c599d1c1bdda76ae0c956f45f5235eb6af62f13b22e0fa7c78a3605b227f0cd5a68d759a2ccac831d19f71f872d83517f02205a0d082cea380065d6a6f20d0c4897e609d71d295a94ff5a90b049fca237bc3ce302c1f65528107d2224d23640d2bbeea1a545759bcf2a7339a64cfdd926bd0025a376d418e2c9d0ad3e2ee2752fb72a54aa3ea089df928e933009138e0ca9eb6c99c406962ca3bbc3df11fe9974b90a22bcd7068953266f615edf9bc32f125effdb85b6f44232c495df1729a4ba2d866797313e8491080a86842b3e78b8e8a6d5d1c85b3766739749a712f8cc518aa42c56641e07f0bfe3a4a798f833761c494e2230059849e156ad68697398b48aa1c29b9ef67e25278564188ebd725c876573e93394fe65b4421fc1ec0d07213ebd6a0be5fc95aba7fb2655fd65e0ac6e99d88c6439246a8b17f4ca4628414a77d2363536eec1c5aace4ce797da96cdb7c8c8d6b074c3b9533e49bef0bbb82053193455f74f178f914b2578d7135161742b81963418228ca91629c36e84dca645de593dee83a4363b97952ee20efb250b3ce89639cbbb8798dd65101cd4c1fef5faf12e86060367361dbb0c22c55d13617a2787b898c3614fab03d0efbbb4a976811743cd7451e5bba2146e57cd4bc5f7b3ff9e0172ec8d6f1b8886e1a005131ab7337442a0a0129bba63b825f3a8c068ff87c814f100418bd34ac916adbb4dc872cae3cffbfe5fb7cf436f000931c02a7621dbcb4e80898035043c6b4411988051f4e487f08bb6e2ccfea8855232ec9199de423a7c18c10c3e160b076e91fbf271c952b096ced2f198a3f71e859c87636f373e8e2fba2392d3f8adcc6926e06ac3e4a68e1b558d00478d9bf4ec26ae5f76cb6255af16a1b5a6fd4d79a47dca48ddde4e32b7354c73c89d5756b003ded6afdb515ad8cba49c124e973bfe57831b0503f5cf8460aad2399daf1cbf1c7e2be8fdb314db3e23e468328d3263980902132f7d0d5457fdd4795150cec8e261a9ac249e27d6672bc668e03340dcfcf2e04c6e2e4e9b428f0c024b81aa6facbf0e7751077ae8cd43ce5f8975a6bf6851da8bac6ece9e4426b0fd221a64e9dccd9cc85e50aab44e21144dae5a88a4b35f56920d531a4fdf989406c92f6ad40cfa3f5633bd3fbf670f4e3c74019141a3cd80bde04260327cd8b4b0d5af034ae4be454093f95858d0b0399f011d6aa74a1729360ad6250c54d1a906ec876b3eb5ae45debd184b7c7119cf100979a8fc0d555bc972b15eeb5abe9cdbfcfab35a40dc54115a42876721b0647892d37f980a7ba10cd512302c9e6672e8f9e671c2bc0f5be3ebb47a834db3e92be88e6ac4ef6f97603ef5023c5acf6f09d119a083d51c3483a953953fd0f1040e4ccfd59b7f283ff2da1311cc1c92c35b97d2423c02082fc8d297f9fa12eb6c712268667c5ea2aa0fa5d71d8e500351795bbc4b03d2d9dbf20364f791ff93d1c4de11c61983435eb40c1bc50caa09d328ac0627c47aab1346200ec606dd4eb41c9dbadf7ff717b172da866ddfc1f2b9b1e49a053a120cbd0885f543608408abff79fc5cce98bd31102453f556a8887f7cfe0126ac77748d5b11c614b595e516bd3347db7cd746004ac33518d73363d6cdb88edbdbd89eef3a0bad2d77bc56ecb2e704695556434e1d641ad9464a1359187fa1591c2f7deae84b6331ea40313a6b96b64f98b316c3409a79dfd0104dfb66b7ed6a81633ed652c2949418de10666c575abe1e4e1dea02d1ec0aca8c54c9a155938fe97a45c81b4434ebed60b8a511f2c3c099cf1d1d33cea22c5aa4f524fa203f2782ea8a8b97b2cab24bb2346b94068e2fd30cd4ecfb7f10b94f9fc41d23159cdab88b2cff834223f23c386072c36bece314b76ae771746eaa1895e9410fae482a8c2f059f128a556f2b23904243279b596d9bfc9869675483878744f5de09ded6299c25758f60df183387bcd62dc786b5e9fbde069aae2c15f45e29fbefecae2bd867069c340802e47fd681a05adf59d07fa9695cdf7c7bef9a406107c251ea4f4e03ab83e216cc63b9f673b25a35da58a33348a3e5ce707f96cbf93816e2f1f4f53708f57058e5f650e9ef6e04e060d967e6cf085904217ffed77afc63670aa50efaa23f445559533c7ae0dd5c74d52b8a652b52ad2d84518a43d3a1aef864967ca92b00f8e849256a0e8e211d888af406e281eaca8cc4f71d1b114e4cbda71204ff4168965f04409a40a3c259f2fb3849d0cb2fc99663e01ecf0bcc0a95be28e51cd733ca097e68ccf4025a636814b4792ed90534e997e3bf2e8509adff62af2c4767feabce6ee6732b5909c3efdff8597ceae981ab35dbb23d6ae57223ff4b30851f1436a97432f3331236999abc2e12f0288976ba65e2b672803384e4d483f28c6661d2d4bfdc63a2fc5081beaeb8d7fb34bbb8460c230c4275e0a06b5c86c017c0a3b5bbd336058be2a67b6ece6ecc3b3743b8b571bd29b4c0ad2693bc4cb206d5f913f631992c45c42dd367c0500b4248cf935f3eaf9d4fd4094cfddde14af840039e106f6e91bb8e4f386537fd49937c6b9b72c81935b809f4d8fae31c6745c8e4ad5f20ddd53d818da5976bc56012e9543a8259ceccef0a4527ed72e4a29fa8e663fe824150c7741dbece6657f8022a0b026c25c91db2290c8aa28f97af03ba60c7ffabe395f39a19103c2f45abf134636dbc87ae7647388c2f60ca8873866c6e2bb5ad620422b02e516f1704029b7c809895438cc8dc8411e4d1b5385d188f3b03cc29810646c4d36b203e422fef24cfd927584763a8a"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x30, 0x0, 0x4, {0xa, 0x8, 0x0, @remote, 0x80000}}}, 0x80, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 0s ago: executing program 6 (id=1322): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280), 0x9, 0x537, &(0x7f0000000fc0)="$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") rmdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_create(0x5) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5eea, &(0x7f000000e480)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0x400000020040005) kernel console output (not intermixed with test programs): ate [ 229.978786][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.002585][ T30] audit: type=1800 audit(1752445311.293:29): pid=7653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.433" name="/" dev="9p" ino=2 res=0 errno=0 [ 232.602656][ T7668] loop7: detected capacity change from 0 to 32768 [ 232.721847][ T7668] bcachefs (/dev/loop7): error reading default superblock: checksum error, type none: got should be [ 232.774004][ T7668] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 232.774004][ T7668] clean (size 2912): [ 232.774004][ T7668] flags: 0 [ 232.774004][ T7668] journal_seq: 10 [ 232.774004][ T7668] usage: type=inodes v=8 [ 232.774004][ T7668] usage: type=key_version v=0 [ 232.774004][ T7668] usage: type=reserved v=0 [ 232.774004][ T7668] usage: type=reserved v=0 [ 232.774004][ T7668] usage: type=reserved v=0 [ 232.774004][ T7668] usage: type=reserved v=0 [ 232.774004][ T7668] data_usage: btree: 1/1 [0]=2816 [ 232.774004][ T7668] data_usage: journal: 1/1 [0]=0 [ 232.774004][ T7668] data_usage: user: 1/1 [0]=16 [ 232.774004][ T7668] dev_usage: dev=0 [ 232.774004][ T7668] free: buckets=83 sectors=0 fragmented=0 [ 232.774004][ T7668] sb: buckets=25 sectors=6152 fragmented=248 [ 232.774004][ T7668] journal: buckets=8 sectors=2048 fragmented=0 [ 232.774004][ T7668] btree: buckets=11 sectors=2816 fragmented=0 [ 232.774004][ T7668] user: buckets=1 sectors=16 fragmented=240 [ 232.774004][ T7668] cached: buckets=0 sectors=0 fragmented=0 [ 232.774004][ T7668] parity: buckets=432345564227567616 sectors=0 fragmented=0 [ 232.774004][ T7668] stripe: buckets=0 sectors=0 fragmented=0 [ 232.774004][ T7668] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 232.774004][ T7668] need_discard: buckets=0 sectors=0 fragmented=0 [ 232.774004][ T7668] overwrite: [ 232.774004][ T7668] clock: write=1280 [ 232.774004][ T7668] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len [ 232.774891][ T7668] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 234.899882][ T7671] sctp: failed to load transform for md5: -2 [ 235.457752][ T7345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.695077][ T7731] loop7: detected capacity change from 0 to 256 [ 240.100381][ T7731] FAT-fs (loop7): Directory bread(block 64) failed [ 240.139495][ T7731] FAT-fs (loop7): Directory bread(block 65) failed [ 240.203892][ T7731] FAT-fs (loop7): Directory bread(block 66) failed [ 240.284552][ T7731] FAT-fs (loop7): Directory bread(block 67) failed [ 240.817684][ T7731] FAT-fs (loop7): Directory bread(block 68) failed [ 240.875607][ T7731] FAT-fs (loop7): Directory bread(block 69) failed [ 240.923811][ T7731] FAT-fs (loop7): Directory bread(block 70) failed [ 240.935804][ T7345] veth0_vlan: entered promiscuous mode [ 240.959923][ T7731] FAT-fs (loop7): Directory bread(block 71) failed [ 240.987013][ T7731] FAT-fs (loop7): Directory bread(block 72) failed [ 241.016447][ T7731] FAT-fs (loop7): Directory bread(block 73) failed [ 241.040352][ T7345] veth1_vlan: entered promiscuous mode [ 241.110884][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.454'. [ 241.354762][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024b83400: rx timeout, send abort [ 241.854861][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024b83800: rx timeout, send abort [ 241.864455][ C1] vcan0: j1939_tp_rxtimer: 0xffff888024b83400: abort rx timeout. Force session deactivation [ 242.184070][ T7754] loop2: detected capacity change from 0 to 64 [ 242.220010][ T30] audit: type=1800 audit(1752445323.523:30): pid=7754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.457" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 242.363102][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888024b83800: abort rx timeout. Force session deactivation [ 242.368202][ T7760] bio_check_eod: 69 callbacks suppressed [ 242.368220][ T7760] syz.2.457: attempt to access beyond end of device [ 242.368220][ T7760] loop2: rw=34817, sector=18, nr_sectors = 400 limit=64 [ 242.405367][ T7760] syz.2.457: attempt to access beyond end of device [ 242.405367][ T7760] loop2: rw=34817, sector=420, nr_sectors = 20 limit=64 [ 242.428434][ T7760] syz.2.457: attempt to access beyond end of device [ 242.428434][ T7760] loop2: rw=34817, sector=441, nr_sectors = 64 limit=64 [ 242.896535][ T7345] veth0_macvtap: entered promiscuous mode [ 242.993878][ T7345] veth1_macvtap: entered promiscuous mode [ 243.163628][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.233846][ T7345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.646075][ T7345] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.719474][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 244.469258][ T7345] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.518567][ T7345] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.609515][ T7345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.089967][ T30] audit: type=1107 audit(1752445329.373:31): pid=7808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 248.218485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.281134][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.750828][ T7819] binder: 7817:7819 ioctl c0306201 200000000280 returned -14 [ 248.903828][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.980841][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.021019][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.472'. [ 249.194984][ T7832] loop2: detected capacity change from 0 to 1024 [ 250.649630][ T30] audit: type=1800 audit(1752445331.953:32): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.480" name="/" dev="9p" ino=2 res=0 errno=0 [ 250.655584][ T7851] netfs: Couldn't get user pages (rc=-14) [ 251.013141][ T7849] loop7: detected capacity change from 0 to 32768 [ 251.047689][ T987] hfsplus: b-tree write err: -5, ino 4 [ 251.274697][ T7849] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 251.274722][ T7849] allowing incompatible features above 0.0: (unknown version) [ 251.274739][ T7849] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 251.320491][ T7849] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 251.328724][ T7849] bcachefs (loop7): initializing new filesystem [ 251.341675][ T7849] bcachefs (loop7): going read-write [ 251.959925][ T7849] bcachefs (loop7): marking superblocks [ 251.981258][ T7849] bcachefs (loop7): initializing freespace [ 251.991447][ T7849] bcachefs (loop7): done initializing freespace [ 252.002677][ T7849] bcachefs (loop7): reading snapshots table [ 252.008658][ T7849] bcachefs (loop7): reading snapshots done [ 252.135272][ T7849] bcachefs (loop7): done starting filesystem [ 252.580961][ T7849] syz.7.479 (7849) used greatest stack depth: 16376 bytes left [ 254.994576][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.009040][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.914522][ T6548] bcachefs (loop7): shutting down [ 256.170124][ T6548] bcachefs (loop7): going read-only [ 256.175872][ T6548] bcachefs (loop7): finished waiting for writes to stop [ 256.317045][ T6548] bcachefs (loop7): flushing journal and stopping allocators, journal seq 6 [ 256.712680][ T6548] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 6 [ 256.772125][ T6548] bcachefs (loop7): clean shutdown complete, journal seq 7 [ 257.674941][ T6548] bcachefs (loop7): marking filesystem clean [ 258.093483][ T7920] loop8: detected capacity change from 0 to 40427 [ 258.129540][ T7920] F2FS-fs (loop8): build fault injection rate: 16 [ 258.136102][ T7920] F2FS-fs (loop8): build fault injection type: 0x3bfe8e [ 258.223589][ T7920] F2FS-fs (loop8): invalid crc value [ 258.231550][ C0] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70 [ 258.242336][ T7920] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-5) [ 258.597172][ T6548] bcachefs (loop7): shutdown complete [ 259.773781][ T7942] binder: BINDER_SET_CONTEXT_MGR already set [ 259.789275][ T7942] binder: 7941:7942 ioctl 4018620d 200000000040 returned -16 [ 265.992576][ T8016] netlink: 68 bytes leftover after parsing attributes in process `syz.8.520'. [ 267.460328][ T8036] netlink: 'syz.6.526': attribute type 10 has an invalid length. [ 267.507125][ T8036] veth0_vlan: left promiscuous mode [ 267.579846][ T8036] veth0_vlan: entered promiscuous mode [ 267.627231][ T8036] team0: Device veth0_vlan failed to register rx_handler [ 267.954938][ T8050] overlayfs: failed to clone upperpath [ 268.023300][ T8052] fuse: root generation should be zero [ 268.352920][ T8062] loop7: detected capacity change from 0 to 256 [ 272.211815][ T8111] loop7: detected capacity change from 0 to 128 [ 273.894844][ T12] kworker/u8:0: attempt to access beyond end of device [ 273.894844][ T12] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 274.052206][ T12] kworker/u8:0: attempt to access beyond end of device [ 274.052206][ T12] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 274.572817][ T12] kworker/u8:0: attempt to access beyond end of device [ 274.572817][ T12] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 274.654496][ T12] kworker/u8:0: attempt to access beyond end of device [ 274.654496][ T12] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 275.557640][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.557640][ T12] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 275.572484][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.572484][ T12] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 275.587654][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.587654][ T12] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 275.606670][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.606670][ T12] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 275.631287][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.631287][ T12] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 275.655884][ T12] kworker/u8:0: attempt to access beyond end of device [ 275.655884][ T12] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 278.981877][ T8158] binder_alloc: 8157: pid 8157 spamming oneway? 1 buffers allocated for a total size of 4096 [ 279.089489][ T8163] binder_alloc: 8157: pid 8157 spamming oneway? 2 buffers allocated for a total size of 5120 [ 280.491173][ T8173] loop8: detected capacity change from 0 to 32768 [ 280.553956][ T8175] loop6: detected capacity change from 0 to 256 [ 280.591861][ T8168] pimreg: entered allmulticast mode [ 280.603578][ T8173] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 280.614250][ T8173] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 280.727135][ T8173] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 280.739551][ T842] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 281.664551][ T842] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 281.809674][ T842] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 145ms [ 281.817663][ T842] gfs2: fsid=syz:syz.0: jid=0: Done [ 282.030355][ T8173] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 282.582524][ T30] audit: type=1326 audit(1752445363.873:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0272ab19 code=0x7ffc0000 [ 282.868834][ T30] audit: type=1326 audit(1752445363.873:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0278e929 code=0x7ffc0000 [ 282.924044][ T30] audit: type=1326 audit(1752445363.873:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0272ab19 code=0x7ffc0000 [ 282.991679][ T30] audit: type=1326 audit(1752445363.873:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0272ab19 code=0x7ffc0000 [ 283.084393][ T30] audit: type=1326 audit(1752445363.873:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0272ab19 code=0x7ffc0000 [ 283.229700][ T30] audit: type=1326 audit(1752445363.873:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0278e929 code=0x7ffc0000 [ 283.261682][ T30] audit: type=1326 audit(1752445363.873:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0278e929 code=0x7ffc0000 [ 283.289465][ T30] audit: type=1326 audit(1752445363.873:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0278e929 code=0x7ffc0000 [ 283.331914][ T30] audit: type=1326 audit(1752445363.873:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e0272ab19 code=0x7ffc0000 [ 283.362499][ T8173] overlay: filesystem on ./file1 not supported [ 283.369647][ T30] audit: type=1326 audit(1752445363.873:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0278e929 code=0x7ffc0000 [ 286.908457][ T8236] loop8: detected capacity change from 0 to 256 [ 287.222363][ T5861] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 287.908437][ T8256] loop8: detected capacity change from 0 to 512 [ 289.515302][ T8256] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.584: casefold flag without casefold feature [ 289.638729][ T8256] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.584: couldn't read orphan inode 15 (err -117) [ 289.690838][ T8275] process 'syz.5.589' launched '/dev/fd/5' with NULL argv: empty string added [ 289.792585][ T8256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.231906][ T8283] loop2: detected capacity change from 0 to 32768 [ 290.493118][ T8283] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 290.493151][ T8283] allowing incompatible features above 0.0: (unknown version) [ 290.493166][ T8283] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 290.539567][ T8283] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 290.547748][ T8283] bcachefs (loop2): initializing new filesystem [ 290.561605][ T8283] bcachefs (loop2): going read-write [ 290.602742][ T8296] overlayfs: failed to clone upperpath [ 290.630692][ T8283] bcachefs (loop2): marking superblocks [ 290.645718][ T8283] bcachefs (loop2): initializing freespace [ 290.657662][ T8283] bcachefs (loop2): done initializing freespace [ 290.666847][ T8283] bcachefs (loop2): reading snapshots table [ 290.672851][ T8283] bcachefs (loop2): reading snapshots done [ 290.738383][ T8283] bcachefs (loop2): done starting filesystem [ 291.396250][ T7345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.919399][ T5851] bcachefs (loop2): shutting down [ 292.112351][ T5851] bcachefs (loop2): going read-only [ 292.358281][ T5851] bcachefs (loop2): finished waiting for writes to stop [ 292.595798][ T5851] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 292.742950][ T5851] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 292.809802][ T5851] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 292.842950][ T5851] bcachefs (loop2): marking filesystem clean [ 292.992634][ T5851] bcachefs (loop2): shutdown complete [ 296.919250][ T8372] loop8: detected capacity change from 0 to 512 [ 297.074626][ T8372] EXT4-fs: Ignoring removed orlov option [ 297.260692][ T8372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.481920][ T8372] EXT4-fs (loop8): orphan cleanup on readonly fs [ 297.625842][ T8372] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.616: bg 0: block 248: padding at end of block bitmap is not set [ 297.801556][ T8372] __quota_error: 57 callbacks suppressed [ 297.801576][ T8372] Quota error (device loop8): write_blk: dquota write failed [ 297.821046][ T8379] loop7: detected capacity change from 0 to 8 [ 297.852684][ T8372] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 297.907188][ T8372] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.616: Failed to acquire dquot type 1 [ 297.946745][ T8372] EXT4-fs (loop8): 1 truncate cleaned up [ 297.965997][ T8372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.055844][ T8372] EXT4-fs: Ignoring removed orlov option [ 298.104726][ T8372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.200362][ T8372] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 298.760287][ T8372] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.616: Abort forced by user [ 298.785745][ T8372] EXT4-fs (loop8): Remounting filesystem read-only [ 298.819386][ T8372] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 298.827807][ T8372] ext4 filesystem being remounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.702832][ T7345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.591085][ T8441] netlink: 'syz.6.631': attribute type 39 has an invalid length. [ 307.215923][ T8483] netfs: Couldn't get user pages (rc=-14) [ 309.732417][ T8503] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 311.272844][ T8519] loop7: detected capacity change from 0 to 256 [ 312.027573][ T8524] loop6: detected capacity change from 0 to 32768 [ 312.035392][ T8524] btrfs: Deprecated parameter 'usebackuproot' [ 312.041563][ T8524] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 312.101660][ T8524] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.651 (8524) [ 312.133939][ T8524] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 312.144245][ T8524] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 312.153580][ T8524] BTRFS info (device loop6): using free-space-tree [ 312.179562][ T8519] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 312.234773][ T8527] overlayfs: failed to clone lowerpath [ 312.242525][ T8519] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 312.515222][ T1136] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 312.530712][ T8524] BTRFS error (device loop6): failed to load root extent [ 312.537795][ T8524] BTRFS warning (device loop6): try to load backup roots slot 1 [ 312.546913][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.556261][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.574498][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.583358][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 312.608340][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.621066][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.655368][ T8519] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 312.720373][ T8524] BTRFS warning (device loop6): couldn't read tree root [ 312.727347][ T8524] BTRFS warning (device loop6): try to load backup roots slot 2 [ 312.739785][ T6617] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 312.754609][ T8524] BTRFS warning (device loop6): couldn't read tree root [ 312.761679][ T8524] BTRFS warning (device loop6): try to load backup roots slot 3 [ 313.800625][ T8524] BTRFS info (device loop6): rebuilding free space tree [ 313.818745][ T8524] BTRFS info (device loop6): checking UUID tree [ 314.174093][ T6152] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.660213][ T5861] Bluetooth: hci6: command tx timeout [ 315.847739][ T4575] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.440278][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.446770][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.837737][ T5861] Bluetooth: hci6: command tx timeout [ 317.261149][ T8581] netlink: 20 bytes leftover after parsing attributes in process `syz.7.661'. [ 317.959419][ T30] audit: type=1326 audit(1752445399.243:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.5.662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f633738e929 code=0x0 [ 318.894113][ T4575] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.904547][ T5861] Bluetooth: hci6: command tx timeout [ 318.940345][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.5.665'. [ 320.545948][ T4575] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.969433][ T5861] Bluetooth: hci6: command tx timeout [ 321.044361][ T4575] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.152773][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 322.295078][ T8629] loop7: detected capacity change from 0 to 512 [ 322.350518][ T8629] ext3: Unknown parameter 'audit' [ 323.055215][ T8635] loop7: detected capacity change from 0 to 32768 [ 323.355406][ T8635] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 323.355442][ T8635] allowing incompatible features above 0.0: (unknown version) [ 323.355457][ T8635] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 323.401212][ T8635] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0 [ 323.409423][ T8635] bcachefs (loop7): initializing new filesystem [ 323.425175][ T8635] bcachefs (loop7): going read-write [ 323.519998][ T8635] bcachefs (loop7): marking superblocks [ 323.533890][ T8635] bcachefs (loop7): initializing freespace [ 323.543810][ T8635] bcachefs (loop7): done initializing freespace [ 323.552797][ T8635] bcachefs (loop7): reading snapshots table [ 323.558744][ T8635] bcachefs (loop7): reading snapshots done [ 323.603005][ T8635] bcachefs (loop7): done starting filesystem [ 324.671339][ T6548] bcachefs (loop7): shutting down [ 324.676415][ T6548] bcachefs (loop7): going read-only [ 324.682775][ T6548] bcachefs (loop7): finished waiting for writes to stop [ 324.720065][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.727267][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.747486][ T8533] bridge_slave_0: entered allmulticast mode [ 324.749639][ T6548] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 324.756512][ T8533] bridge_slave_0: entered promiscuous mode [ 324.790060][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.803542][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.834306][ T8533] bridge_slave_1: entered allmulticast mode [ 324.863438][ T8533] bridge_slave_1: entered promiscuous mode [ 324.874911][ T4575] bridge_slave_1: left allmulticast mode [ 324.912952][ T6548] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3 [ 324.929383][ T4575] bridge_slave_1: left promiscuous mode [ 325.027035][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.057109][ T6548] bcachefs (loop7): clean shutdown complete, journal seq 4 [ 325.179666][ T6548] bcachefs (loop7): marking filesystem clean [ 325.258822][ T4575] bridge_slave_0: left allmulticast mode [ 325.289431][ T4575] bridge_slave_0: left promiscuous mode [ 325.295211][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.487925][ T6548] bcachefs (loop7): shutdown complete [ 327.470152][ T8692] overlayfs: failed to clone upperpath [ 328.690159][ T8700] xt_CT: No such helper "netbios-ns" [ 328.797040][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 330.652276][ T5954] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 331.468532][ T4575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.563136][ T4575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.618898][ T4575] bond0 (unregistering): Released all slaves [ 331.650597][ T8724] fuse: Bad value for 'fd' [ 331.865069][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.914286][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'. [ 331.958737][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.021270][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.698'. [ 336.391264][ T8730] team0: entered promiscuous mode [ 337.098204][ T8730] team_slave_0: entered promiscuous mode [ 337.226488][ T8730] team_slave_1: entered promiscuous mode [ 337.234720][ T8730] bond0: entered promiscuous mode [ 337.275348][ T8730] bond_slave_0: entered promiscuous mode [ 337.296260][ T8730] bond_slave_1: entered promiscuous mode [ 337.350021][ T8730] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 339.657678][ T8533] team0: Port device team_slave_0 added [ 339.760623][ T8533] team0: Port device team_slave_1 added [ 342.041382][ T4575] hsr_slave_0: left promiscuous mode [ 342.068523][ T4575] hsr_slave_1: left promiscuous mode [ 342.075179][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.088316][ T4575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.025504][ T8827] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 346.025504][ T8827] program syz.8.725 not setting count and/or reply_len properly [ 350.662397][ T8859] ubi31: attaching mtd0 [ 350.812393][ T8859] ubi31: scanning is finished [ 350.818685][ T8859] ubi31: empty MTD device detected [ 352.658986][ T4575] team0 (unregistering): Port device team_slave_1 removed [ 352.903970][ T8859] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 355.244419][ T4575] team0 (unregistering): Port device team_slave_0 removed [ 355.412280][ T8886] netlink: 384 bytes leftover after parsing attributes in process `syz.7.741'. [ 355.423179][ T8886] netlink: 'syz.7.741': attribute type 2 has an invalid length. [ 357.827374][ T8896] usb usb7: usbfs: process 8896 (syz.6.744) did not claim interface 0 before use [ 358.248572][ T8903] loop8: detected capacity change from 0 to 128 [ 358.629766][ T8903] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.690457][ T8903] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 359.638251][ T30] audit: type=1800 audit(1752445440.933:101): pid=8915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.749" name="file1" dev="tmpfs" ino=1055 res=0 errno=0 [ 360.308808][ T7345] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.991782][ T8933] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 361.998901][ T8933] overlayfs: failed to set xattr on upper [ 362.004804][ T8933] overlayfs: ...falling back to redirect_dir=nofollow. [ 362.011698][ T8933] overlayfs: ...falling back to index=off. [ 362.017485][ T8933] overlayfs: ...falling back to uuid=null. [ 364.652974][ T8955] netlink: 'syz.5.763': attribute type 2 has an invalid length. [ 365.390672][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.549153][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.662317][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.714025][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.760439][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.714198][ T8969] loop7: detected capacity change from 0 to 131072 [ 366.750777][ T8533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.809595][ T8969] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 366.817717][ T8969] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 366.837791][ T8969] F2FS-fs (loop7): invalid crc value [ 367.043663][ T8969] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 367.050991][ T8969] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 368.612754][ T8533] hsr_slave_0: entered promiscuous mode [ 368.619228][ T8533] hsr_slave_1: entered promiscuous mode [ 368.725722][ T8533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.774120][ T8533] Cannot create hsr debugfs directory [ 369.126900][ T8989] loop6: detected capacity change from 0 to 8 [ 369.203578][ T8989] SQUASHFS error: Failed to read block 0x636: -5 [ 369.210179][ T8989] SQUASHFS error: Unable to read metadata cache entry [634] [ 370.729093][ T8996] loop6: detected capacity change from 0 to 32768 [ 370.736603][ T8996] XFS: ikeep mount option is deprecated. [ 370.912189][ T8996] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 371.590454][ T8996] XFS (loop6): Ending clean mount [ 371.651746][ T8996] XFS (loop6): Quotacheck needed: Please wait. [ 371.831978][ T8996] XFS (loop6): Quotacheck: Done. [ 373.614901][ T9023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.622345][ T9023] IPv6: NLM_F_CREATE should be set when creating new route [ 373.629623][ T9023] IPv6: NLM_F_CREATE should be set when creating new route [ 373.636827][ T9023] IPv6: NLM_F_CREATE should be set when creating new route [ 373.841429][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.869595][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.894126][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.914095][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.937628][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.736045][ T6152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 375.795179][ T6017] bridge_slave_1: left allmulticast mode [ 375.821839][ T6017] bridge_slave_1: left promiscuous mode [ 375.859061][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.090678][ T5858] Bluetooth: hci3: command tx timeout [ 377.502375][ T6017] bridge_slave_0: left allmulticast mode [ 377.508071][ T6017] bridge_slave_0: left promiscuous mode [ 377.600058][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.793638][ T9066] 9pnet_fd: Insufficient options for proto=fd [ 377.887846][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.050428][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.199969][ T5858] Bluetooth: hci3: command tx timeout [ 378.857638][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.143852][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.249444][ T5858] Bluetooth: hci3: command tx timeout [ 381.448050][ T6017] bond0 (unregistering): Released all slaves [ 382.504242][ T5858] Bluetooth: hci3: command tx timeout [ 383.417039][ T6017] hsr_slave_0: left promiscuous mode [ 383.669837][ T6017] hsr_slave_1: left promiscuous mode [ 383.675976][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.858645][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.220768][ T9124] loop6: detected capacity change from 0 to 1024 [ 388.463776][ T9138] hfsplus: extend alloc file! (8192,512,17039360) [ 388.949621][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 389.279006][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 391.935944][ T9152] syz.6.803 (9152): drop_caches: 2 [ 391.963402][ T9152] syz.6.803 (9152): drop_caches: 2 [ 392.151886][ T9158] Bluetooth: MGMT ver 1.23 [ 393.583868][ T9169] loop7: detected capacity change from 0 to 8 [ 393.713828][ T9169] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 393.904093][ T9068] udevd[9068]: incorrect cramfs checksum on /dev/loop7 [ 394.137262][ T9068] udevd[9068]: incorrect cramfs checksum on /dev/loop7 [ 394.174469][ T9169] cramfs: Error -3 while decompressing! [ 394.180396][ T9169] cramfs: ffffffff99bebb62(26)->ffff888056ec7000(4096) [ 394.187242][ T9169] cramfs: Error -3 while decompressing! [ 394.192833][ T9169] cramfs: ffffffff99bebb7c(16)->ffff8880572ec000(4096) [ 394.199747][ T9169] cramfs: Error -3 while decompressing! [ 394.205275][ T9169] cramfs: ffffffff99bebb62(26)->ffff888056ec7000(4096) [ 394.212365][ T30] audit: type=1800 audit(1752445475.513:102): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.810" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 397.491680][ T9028] chnl_net:caif_netlink_parms(): no params data found [ 399.768466][ T9216] mmap: syz.5.820 (9216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 401.663961][ T9229] loop7: detected capacity change from 0 to 512 [ 402.444764][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.506576][ T9229] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 402.707375][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.714746][ T9028] bridge_slave_0: entered allmulticast mode [ 402.725168][ T9028] bridge_slave_0: entered promiscuous mode [ 402.735090][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.010116][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.017398][ T9028] bridge_slave_1: entered allmulticast mode [ 403.025402][ T9028] bridge_slave_1: entered promiscuous mode [ 406.353555][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.802568][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.998141][ T9259] loop8: detected capacity change from 0 to 32768 [ 407.358879][ T9259] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 407.358915][ T9259] allowing incompatible features above 0.0: (unknown version) [ 407.358931][ T9259] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 407.403500][ T9259] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 407.411775][ T9259] bcachefs (loop8): initializing new filesystem [ 407.424176][ T9259] bcachefs (loop8): going read-write [ 407.698275][ T9259] bcachefs (loop8): marking superblocks [ 407.717615][ T9259] bcachefs (loop8): initializing freespace [ 407.728541][ T9259] bcachefs (loop8): done initializing freespace [ 407.736899][ T9259] bcachefs (loop8): reading snapshots table [ 407.742880][ T9259] bcachefs (loop8): reading snapshots done [ 407.765935][ T9028] team0: Port device team_slave_0 added [ 407.777547][ T9028] team0: Port device team_slave_1 added [ 408.804444][ T9259] bcachefs (loop8): done starting filesystem [ 410.261421][ T7345] bcachefs (loop8): shutting down [ 410.266493][ T7345] bcachefs (loop8): going read-only [ 410.302621][ T7345] bcachefs (loop8): finished waiting for writes to stop [ 410.504082][ T9285] Cannot find set identified by id 0 to match [ 410.688120][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.762516][ T7345] bcachefs (loop8): flushing journal and stopping allocators, journal seq 5 [ 410.984644][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.039601][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.055165][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.062179][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.141319][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.368062][ T9299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.425947][ T7345] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 9 [ 412.458831][ T7345] bcachefs (loop8): clean shutdown complete, journal seq 10 [ 412.470334][ T7345] bcachefs (loop8): marking filesystem clean [ 412.555917][ T9028] hsr_slave_0: entered promiscuous mode [ 412.567896][ T7345] bcachefs (loop8): shutdown complete [ 412.597470][ T9028] hsr_slave_1: entered promiscuous mode [ 412.627165][ T9028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.659301][ T9028] Cannot create hsr debugfs directory [ 415.183502][ T9028] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 415.229309][ T9028] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 415.282050][ T9028] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 415.344255][ T9028] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 416.561078][ T9340] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 416.739766][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.847002][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.855698][ T9343] hub 9-0:1.0: USB hub found [ 416.866239][ T9343] hub 9-0:1.0: 1 port detected [ 416.893008][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.900214][ T6618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.954197][ T6016] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.961418][ T6016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.308669][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.322576][ T9367] syz.5.856 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 423.888202][ T9391] tipc: Enabling of bearer rejected, failed to enable media [ 427.372636][ T9028] veth0_vlan: entered promiscuous mode [ 427.499146][ T9028] veth1_vlan: entered promiscuous mode [ 427.635829][ T9028] veth0_macvtap: entered promiscuous mode [ 427.675774][ T9028] veth1_macvtap: entered promiscuous mode [ 427.784080][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.039781][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 428.051253][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.124403][ T9028] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.137412][ T9028] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.152867][ T9028] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.161718][ T9028] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.244391][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.291882][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 428.384816][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.494023][ T9] usb 9-1: config 0 descriptor?? [ 428.580336][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 428.694671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.869463][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.029031][ T6618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.042195][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 429.096980][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 429.127740][ T6618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.176203][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 429.183377][ T9422] loop6: detected capacity change from 0 to 32768 [ 429.224381][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 429.280698][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 429.323338][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 429.350889][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 429.363483][ T9422] [ 429.363483][ T9422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 429.363483][ T9422] [ 429.427500][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 429.494522][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 429.547530][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 429.571400][ T9422] ERROR: (device loop6): diWrite: ixpxd invalid [ 429.571400][ T9422] [ 429.588440][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 429.614857][ T9422] ERROR: (device loop6): remounting filesystem as read-only [ 429.671027][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 429.724200][ T9422] ERROR: (device loop6): txCommit: [ 429.724200][ T9422] [ 430.101751][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 430.115918][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 430.132863][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 430.306395][ T9441] ERROR: (device loop6): dtSearch: stack overrun! [ 430.306395][ T9441] [ 430.315502][ T9441] ERROR: (device loop6): remounting filesystem as read-only [ 430.322912][ T9441] btstack dump: [ 430.326561][ T9441] bn = 0, index = 0 [ 430.332206][ T9441] bn = 30, index = 0 [ 430.336481][ T9441] bn = 0, index = 0 [ 430.340376][ T9441] bn = 30, index = 0 [ 430.344360][ T9441] bn = 0, index = 0 [ 430.348228][ T9441] bn = 30, index = 0 [ 430.352231][ T9441] bn = 0, index = 0 [ 430.356103][ T9441] bn = 0, index = 0 [ 430.360400][ T9441] jfs_lookup: dtSearch returned -5 [ 430.905870][ T9] pwc: Registered as video103. [ 431.080394][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 431.319566][ T9] usb 9-1: USB disconnect, device number 2 [ 431.737495][ T9454] random: crng reseeded on system resumption [ 434.148690][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.157743][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.166690][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.937753][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.950018][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.415558][ T9471] sp0: Synchronizing with TNC [ 437.059328][ T5858] Bluetooth: hci6: command tx timeout [ 438.745612][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.130513][ T5858] Bluetooth: hci6: command tx timeout [ 439.332678][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.421294][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.976351][ T9501] xt_CT: No such helper "snmp" [ 441.219698][ T5858] Bluetooth: hci6: command tx timeout [ 442.114426][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.319189][ T5858] Bluetooth: hci6: command tx timeout [ 445.923971][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.040034][ T30] audit: type=1800 audit(1752445527.333:103): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.896" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 446.270200][ T9538] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 447.269647][ T9538] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 447.326776][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.349317][ T9538] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 447.806025][ T9558] loop6: detected capacity change from 0 to 164 [ 447.819056][ T9558] Unable to read rock-ridge attributes [ 447.890018][ T9558] Unable to read rock-ridge attributes [ 448.026348][ T9560] Unable to read rock-ridge attributes [ 448.880866][ T9560] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 448.995521][ T9558] Unable to read rock-ridge attributes [ 450.567534][ T9459] chnl_net:caif_netlink_parms(): no params data found [ 450.766945][ T9574] loop6: detected capacity change from 0 to 32768 [ 450.824390][ T9574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.905 (9574) [ 451.577255][ T9574] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 451.587464][ T9574] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 451.596317][ T9574] BTRFS info (device loop6): disk space caching is enabled [ 451.603529][ T9574] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 451.817726][ T49] bridge_slave_1: left allmulticast mode [ 451.831862][ T49] bridge_slave_1: left promiscuous mode [ 451.837731][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.877058][ T49] bridge_slave_0: left allmulticast mode [ 452.909549][ T49] bridge_slave_0: left promiscuous mode [ 452.915343][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.973829][ T9574] BTRFS info (device loop6): rebuilding free space tree [ 453.000149][ T9574] BTRFS info (device loop6): disabling free space tree [ 453.008152][ T9574] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 453.017835][ T9574] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 454.611239][ T30] audit: type=1800 audit(1752445535.583:104): pid=9607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.905" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 455.550028][ T6152] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.782434][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 458.319450][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.913'. [ 460.720093][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 460.749419][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 460.757313][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 460.766056][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 460.774644][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.979305][ T5862] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 463.089304][ T5858] Bluetooth: hci0: command tx timeout [ 463.149302][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 463.182227][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.461707][ T5862] usb 9-1: config 0 has no interfaces? [ 463.467848][ T5862] usb 9-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 5.5d [ 463.490125][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.510316][ T5862] usb 9-1: config 0 descriptor?? [ 463.592135][ T9660] netlink: 'syz.5.924': attribute type 62 has an invalid length. [ 464.606210][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.831149][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.856206][ T49] bond0 (unregistering): Released all slaves [ 465.129416][ T5858] Bluetooth: hci0: command tx timeout [ 465.138804][ T9619] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 465.607424][ T9569] usb 9-1: USB disconnect, device number 3 [ 465.714599][ T6618] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 467.219417][ T5858] Bluetooth: hci0: command tx timeout [ 467.469757][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 468.578431][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 469.557164][ T9695] sctp: failed to load transform for md5: -2 [ 469.563128][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 469.566093][ T5858] Bluetooth: hci0: command tx timeout [ 469.739594][ T24] usb 7-1: config 0 has no interface number 0 [ 470.065699][ T24] usb 7-1: string descriptor 0 read error: -71 [ 470.072811][ T24] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 470.089360][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.887623][ T24] usb 7-1: config 0 descriptor?? [ 470.948812][ T24] usb 7-1: can't set config #0, error -71 [ 471.027466][ T24] usb 7-1: USB disconnect, device number 4 [ 472.005384][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.133785][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.169756][ T9459] bridge_slave_0: entered allmulticast mode [ 472.353765][ T9459] bridge_slave_0: entered promiscuous mode [ 472.427727][ T49] hsr_slave_0: left promiscuous mode [ 473.350745][ T49] hsr_slave_1: left promiscuous mode [ 473.357645][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.365177][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.410190][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.417605][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.552761][ T49] veth1_macvtap: left promiscuous mode [ 473.600647][ T49] veth0_macvtap: left promiscuous mode [ 474.030407][ T49] veth1_vlan: left promiscuous mode [ 474.056825][ T49] veth0_vlan: left promiscuous mode [ 479.264808][ T49] team0 (unregistering): Port device team_slave_1 removed [ 479.466903][ T49] team0 (unregistering): Port device team_slave_0 removed [ 485.798937][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.830450][ T9459] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.839683][ T9459] bridge_slave_1: entered allmulticast mode [ 485.862733][ T9459] bridge_slave_1: entered promiscuous mode [ 485.913848][ T9758] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 485.923237][ T9758] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 485.932999][ T9758] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 486.065925][ T30] audit: type=1800 audit(1752445567.213:105): pid=9758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.947" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 486.149896][ T9459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.186571][ T9459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.890171][ T9800] loop6: detected capacity change from 0 to 32768 [ 486.897461][ T9800] XFS: ikeep mount option is deprecated. [ 487.000909][ T9800] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 487.082984][ T9800] XFS (loop6): Ending clean mount [ 487.085935][ T9459] team0: Port device team_slave_0 added [ 487.091237][ T9800] XFS (loop6): Quotacheck needed: Please wait. [ 487.150892][ T9810] loop8: detected capacity change from 0 to 512 [ 487.197867][ T9800] XFS (loop6): Quotacheck: Done. [ 487.249520][ T9810] EXT4-fs (loop8): failed to initialize system zone (-117) [ 487.289468][ T9810] EXT4-fs (loop8): mount failed [ 487.561523][ T9459] team0: Port device team_slave_1 added [ 489.672571][ T6152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 489.950365][ T9825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.056950][ T9635] chnl_net:caif_netlink_parms(): no params data found [ 491.329515][ T9834] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 492.454844][ T9840] netlink: 'syz.8.965': attribute type 1 has an invalid length. [ 494.487177][ T9848] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 494.607498][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 494.625930][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 494.635924][ T9856] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 494.639603][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 494.661307][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 494.669804][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 494.698763][ T9856] bond1 (unregistering): Released all slaves [ 496.759353][ T5861] Bluetooth: hci3: command tx timeout [ 496.933351][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.986766][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.091915][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.116038][ T9635] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.132500][ T9635] bridge_slave_0: entered allmulticast mode [ 497.176810][ T9635] bridge_slave_0: entered promiscuous mode [ 497.195364][ T9635] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.235673][ T9635] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.263926][ T9635] bridge_slave_1: entered allmulticast mode [ 497.284857][ T9635] bridge_slave_1: entered promiscuous mode [ 499.187384][ T5861] Bluetooth: hci3: command tx timeout [ 499.271099][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.316698][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.953812][ T9635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.146786][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.259869][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.583787][ T9635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.881697][ T9911] binder_alloc: 9910: binder_alloc_buf, no vma [ 500.901647][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.908049][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.292316][ T5858] Bluetooth: hci3: command tx timeout [ 502.501134][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.668839][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.340557][ T9635] team0: Port device team_slave_0 added [ 503.370133][ T5858] Bluetooth: hci3: command tx timeout [ 503.398255][ T9635] team0: Port device team_slave_1 added [ 503.811839][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.832856][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.919292][ T842] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 503.936656][ T9635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.007125][ T9635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.021103][ T9635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.057175][ T9635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.065390][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 504.094588][ T842] usb 9-1: device descriptor read/64, error -71 [ 504.469453][ T842] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 505.389369][ T842] usb 9-1: device descriptor read/64, error -71 [ 505.851790][ T842] usb usb9-port1: attempt power cycle [ 506.841955][ T9960] loop6: detected capacity change from 0 to 32768 [ 506.881558][ T9960] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 506.910046][ T842] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 507.119274][ T842] usb 9-1: device not accepting address 6, error -71 [ 507.263219][ T9975] overlayfs: failed to resolve './file0': -2 [ 507.981432][ T9635] hsr_slave_0: entered promiscuous mode [ 508.110633][ T9635] hsr_slave_1: entered promiscuous mode [ 508.138331][ T9635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.146358][ T9635] Cannot create hsr debugfs directory [ 509.025849][ T9987] overlayfs: failed to clone upperpath [ 509.249324][ T9978] loop8: detected capacity change from 0 to 40427 [ 510.316453][ T9978] F2FS-fs (loop8): invalid crc value [ 510.585310][ T9978] F2FS-fs (loop8): Start checkpoint disabled! [ 510.603248][ T9978] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 511.840896][ T9960] XFS (loop6): Ending clean mount [ 511.855591][ T9960] XFS (loop6): Quotacheck needed: Please wait. [ 512.120394][ T9960] XFS (loop6): Quotacheck: Done. [ 512.155139][ T6152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 512.182065][ T49] bridge_slave_1: left allmulticast mode [ 512.187823][ T49] bridge_slave_1: left promiscuous mode [ 512.195215][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.208561][ T49] bridge_slave_0: left allmulticast mode [ 512.214432][ T49] bridge_slave_0: left promiscuous mode [ 512.226553][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.326065][ T49] bridge_slave_1: left allmulticast mode [ 512.352500][ T49] bridge_slave_1: left promiscuous mode [ 512.367571][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.386116][ T49] bridge_slave_0: left allmulticast mode [ 512.405942][ T49] bridge_slave_0: left promiscuous mode [ 512.427345][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.459525][ T9997] F2FS-fs (loop8): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 512.574665][ T6017] bio_check_eod: 91 callbacks suppressed [ 512.574685][ T6017] kworker/u8:10: attempt to access beyond end of device [ 512.574685][ T6017] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 512.607583][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 512.607615][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.607632][ T6017] Workqueue: writeback wb_workfn (flush-7:8) [ 512.607679][ T6017] Call Trace: [ 512.607689][ T6017] [ 512.607700][ T6017] dump_stack_lvl+0x189/0x250 [ 512.607741][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.607770][ T6017] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.607810][ T6017] ? __pfx_queue_work_on+0x10/0x10 [ 512.607844][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.607873][ T6017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.607937][ T6017] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.607978][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608008][ T6017] ? f2fs_hw_is_readonly+0x39b/0x470 [ 512.608053][ T6017] f2fs_handle_critical_error+0x37c/0x540 [ 512.608098][ T6017] f2fs_write_end_io+0x495/0x810 [ 512.608122][ T6017] ? blkg_put+0x22/0x240 [ 512.608179][ T6017] __submit_merged_bio+0x27a/0x6a0 [ 512.608223][ T6017] __submit_merged_write_cond+0x255/0x530 [ 512.608268][ T6017] f2fs_write_data_pages+0x261d/0x3000 [ 512.608350][ T6017] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.608484][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608516][ T6017] ? f2fs_write_meta_pages+0x357/0x450 [ 512.608566][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608596][ T6017] ? __lock_acquire+0xab9/0xd20 [ 512.608628][ T6017] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 512.608669][ T6017] do_writepages+0x32e/0x550 [ 512.608704][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608733][ T6017] ? reacquire_held_locks+0x127/0x1d0 [ 512.608765][ T6017] ? writeback_sb_inodes+0x372/0x1000 [ 512.608804][ T6017] __writeback_single_inode+0x145/0xff0 [ 512.608833][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608862][ T6017] ? do_raw_spin_unlock+0x122/0x240 [ 512.608907][ T6017] writeback_sb_inodes+0x6b5/0x1000 [ 512.608951][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.608996][ T6017] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 512.609075][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609104][ T6017] ? rcu_is_watching+0x15/0xb0 [ 512.609134][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609178][ T6017] wb_writeback+0x43b/0xaf0 [ 512.609218][ T6017] ? queue_io+0x3b1/0x590 [ 512.609250][ T6017] ? __pfx_wb_writeback+0x10/0x10 [ 512.609289][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.609334][ T6017] wb_workfn+0x409/0xef0 [ 512.609393][ T6017] ? __pfx_wb_workfn+0x10/0x10 [ 512.609437][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609465][ T6017] ? __lock_acquire+0xab9/0xd20 [ 512.609505][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609538][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609572][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.609608][ T6017] ? process_scheduled_works+0x9ef/0x17b0 [ 512.609636][ T6017] ? process_scheduled_works+0x9ef/0x17b0 [ 512.609669][ T6017] process_scheduled_works+0xae1/0x17b0 [ 512.609735][ T6017] ? __pfx_process_scheduled_works+0x10/0x10 [ 512.609774][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.609814][ T6017] worker_thread+0x8a0/0xda0 [ 512.609877][ T6017] kthread+0x711/0x8a0 [ 512.609917][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 512.609947][ T6017] ? __pfx_kthread+0x10/0x10 [ 512.609981][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.610014][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.610049][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.610078][ T6017] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.610115][ T6017] ? __pfx_kthread+0x10/0x10 [ 512.610157][ T6017] ret_from_fork+0x3fc/0x770 [ 512.610188][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 512.610223][ T6017] ? __switch_to_asm+0x39/0x70 [ 512.610256][ T6017] ? __switch_to_asm+0x33/0x70 [ 512.610289][ T6017] ? __pfx_kthread+0x10/0x10 [ 512.610328][ T6017] ret_from_fork_asm+0x1a/0x30 [ 512.610382][ T6017] [ 513.113448][ T6017] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 513.122452][ T6017] CPU: 1 UID: 0 PID: 6017 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 513.122485][ T6017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.122502][ T6017] Workqueue: writeback wb_workfn (flush-7:8) [ 513.122549][ T6017] Call Trace: [ 513.122559][ T6017] [ 513.122571][ T6017] dump_stack_lvl+0x189/0x250 [ 513.122610][ T6017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.122638][ T6017] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 513.122679][ T6017] ? __pfx_queue_work_on+0x10/0x10 [ 513.122718][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.122748][ T6017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 513.122787][ T6017] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 513.122827][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.122856][ T6017] ? f2fs_hw_is_readonly+0x39b/0x470 [ 513.122901][ T6017] f2fs_handle_critical_error+0x37c/0x540 [ 513.122949][ T6017] f2fs_write_end_io+0x495/0x810 [ 513.122972][ T6017] ? blkg_put+0x22/0x240 [ 513.123029][ T6017] __submit_merged_bio+0x27a/0x6a0 [ 513.123076][ T6017] __submit_merged_write_cond+0x255/0x530 [ 513.123124][ T6017] f2fs_write_data_pages+0x261d/0x3000 [ 513.123222][ T6017] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.123379][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.123413][ T6017] ? f2fs_write_meta_pages+0x357/0x450 [ 513.123468][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.123496][ T6017] ? __lock_acquire+0xab9/0xd20 [ 513.123530][ T6017] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 513.123574][ T6017] do_writepages+0x32e/0x550 [ 513.123611][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.123640][ T6017] ? reacquire_held_locks+0x127/0x1d0 [ 513.123671][ T6017] ? writeback_sb_inodes+0x372/0x1000 [ 513.123715][ T6017] __writeback_single_inode+0x145/0xff0 [ 513.123744][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.123773][ T6017] ? do_raw_spin_unlock+0x122/0x240 [ 513.123818][ T6017] writeback_sb_inodes+0x6b5/0x1000 [ 513.123868][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.123916][ T6017] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 513.124008][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124037][ T6017] ? rcu_is_watching+0x15/0xb0 [ 513.124068][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124111][ T6017] wb_writeback+0x43b/0xaf0 [ 513.124158][ T6017] ? queue_io+0x3b1/0x590 [ 513.124191][ T6017] ? __pfx_wb_writeback+0x10/0x10 [ 513.124234][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.124281][ T6017] wb_workfn+0x409/0xef0 [ 513.124345][ T6017] ? __pfx_wb_workfn+0x10/0x10 [ 513.124392][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124421][ T6017] ? __lock_acquire+0xab9/0xd20 [ 513.124465][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124499][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124534][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.124570][ T6017] ? process_scheduled_works+0x9ef/0x17b0 [ 513.124600][ T6017] ? process_scheduled_works+0x9ef/0x17b0 [ 513.124634][ T6017] process_scheduled_works+0xae1/0x17b0 [ 513.124711][ T6017] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.124753][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.124796][ T6017] worker_thread+0x8a0/0xda0 [ 513.124869][ T6017] kthread+0x711/0x8a0 [ 513.124911][ T6017] ? __pfx_worker_thread+0x10/0x10 [ 513.124942][ T6017] ? __pfx_kthread+0x10/0x10 [ 513.124974][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.125009][ T6017] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.125045][ T6017] ? srso_alias_return_thunk+0x5/0xfbef5 [ 513.125073][ T6017] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.125111][ T6017] ? __pfx_kthread+0x10/0x10 [ 513.125154][ T6017] ret_from_fork+0x3fc/0x770 [ 513.125186][ T6017] ? __pfx_ret_from_fork+0x10/0x10 [ 513.125224][ T6017] ? __switch_to_asm+0x39/0x70 [ 513.125258][ T6017] ? __switch_to_asm+0x33/0x70 [ 513.125290][ T6017] ? __pfx_kthread+0x10/0x10 [ 513.125330][ T6017] ret_from_fork_asm+0x1a/0x30 [ 513.125391][ T6017] [ 513.125469][ T6017] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 513.402651][ T30] audit: type=1800 audit(1752445594.703:106): pid=10010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="nullb0" dev="tmpfs" ino=1515 res=0 errno=0 [ 513.808704][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.030288][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.905568][ T49] bond0 (unregistering): Released all slaves [ 517.802640][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 517.813413][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 517.822507][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 517.837863][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.846458][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 519.990932][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.005605][T10063] netlink: 'syz.4.1019': attribute type 21 has an invalid length. [ 520.013697][T10063] netlink: 'syz.4.1019': attribute type 15 has an invalid length. [ 520.021782][T10063] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1019'. [ 520.030856][T10063] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.038802][T10063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.045999][T10063] IPv6: NLM_F_CREATE should be set when creating new route [ 520.053255][T10063] IPv6: NLM_F_CREATE should be set when creating new route [ 520.060493][T10063] IPv6: NLM_F_CREATE should be set when creating new route [ 520.143614][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.166531][ T49] bond0 (unregistering): Released all slaves [ 520.275454][ T9858] chnl_net:caif_netlink_parms(): no params data found [ 520.465211][ T9569] libceph: connect (1)[c::]:6789 error -101 [ 520.472699][ T9569] libceph: mon0 (1)[c::]:6789 connect error [ 520.591539][ T5861] Bluetooth: hci6: command tx timeout [ 520.784435][ T9569] libceph: connect (1)[c::]:6789 error -101 [ 520.792831][ T9569] libceph: mon0 (1)[c::]:6789 connect error [ 521.194646][T10069] ceph: No mds server is up or the cluster is laggy [ 521.978363][ T9938] libceph: connect (1)[c::]:6789 error -101 [ 521.984547][ T9938] libceph: mon0 (1)[c::]:6789 connect error [ 522.115522][T10081] loop6: detected capacity change from 0 to 128 [ 522.377352][T10081] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 522.552801][T10081] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 522.584595][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.661134][ T5861] Bluetooth: hci6: command tx timeout [ 524.741069][ T5861] Bluetooth: hci6: command tx timeout [ 526.441497][ T6152] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 526.840397][ T5861] Bluetooth: hci6: command tx timeout [ 526.909527][T10112] loop8: detected capacity change from 0 to 32768 [ 527.212659][T10112] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 527.212685][T10112] allowing incompatible features above 0.0: (unknown version) [ 527.212697][T10112] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 527.258776][T10112] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0 [ 527.266977][T10112] bcachefs (loop8): initializing new filesystem [ 527.279659][T10112] bcachefs (loop8): going read-write [ 527.315572][T10112] bcachefs (loop8): marking superblocks [ 527.329672][T10112] bcachefs (loop8): initializing freespace [ 527.338408][T10112] bcachefs (loop8): done initializing freespace [ 527.347483][T10112] bcachefs (loop8): reading snapshots table [ 527.354136][T10112] bcachefs (loop8): reading snapshots done [ 527.404068][T10112] bcachefs (loop8): done starting filesystem [ 528.978187][ T7345] bcachefs (loop8): shutting down [ 529.010132][ T7345] bcachefs (loop8): going read-only [ 529.015356][ T7345] bcachefs (loop8): finished waiting for writes to stop [ 529.186764][ T7345] bcachefs (loop8): flushing journal and stopping allocators, journal seq 4 [ 529.476591][ T7345] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 4 [ 529.563937][ T7345] bcachefs (loop8): clean shutdown complete, journal seq 5 [ 529.637078][ T7345] bcachefs (loop8): marking filesystem clean [ 530.554622][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.595834][ T9858] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.715082][ T7345] bcachefs (loop8): shutdown complete [ 530.749896][ T9858] bridge_slave_0: entered allmulticast mode [ 530.791345][ T9858] bridge_slave_0: entered promiscuous mode [ 531.192761][ T49] hsr_slave_0: left promiscuous mode [ 531.285868][ T49] hsr_slave_1: left promiscuous mode [ 531.300079][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.345812][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.750181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.758555][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.996877][T10166] overlayfs: failed to clone upperpath [ 532.457684][ T49] veth1_macvtap: left promiscuous mode [ 532.509450][ T49] veth0_macvtap: left promiscuous mode [ 532.550041][ T49] veth1_vlan: left promiscuous mode [ 532.555588][ T49] veth0_vlan: left promiscuous mode [ 532.976313][T10182] input: syz1 as /devices/virtual/input/input10 [ 534.734671][ T49] team0 (unregistering): Port device team_slave_1 removed [ 534.917124][ T49] team0 (unregistering): Port device team_slave_0 removed [ 535.294732][ T5861] Bluetooth: hci6: command 0x0405 tx timeout [ 535.304290][ T49] pimreg (unregistering): left allmulticast mode [ 537.502831][T10209] netlink: 'syz.6.1048': attribute type 10 has an invalid length. [ 537.548304][ T49] team0 (unregistering): Port device team_slave_1 removed [ 538.670026][T10212] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 538.680923][T10212] qnx6: wrong signature (magic) in superblock #1. [ 538.687329][T10212] qnx6: unable to read the first superblock [ 539.232274][ T49] team0 (unregistering): Port device team_slave_0 removed [ 540.384279][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.394846][ T9858] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.402437][ T9858] bridge_slave_1: entered allmulticast mode [ 540.411331][ T9858] bridge_slave_1: entered promiscuous mode [ 540.474957][T10194] team_slave_0: entered promiscuous mode [ 540.480832][T10194] team_slave_1: entered promiscuous mode [ 540.510523][T10194] vlan2: entered promiscuous mode [ 540.515564][T10194] team0: entered promiscuous mode [ 540.783739][T10209] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.791185][T10209] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.754288][T10209] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.761477][T10209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.769559][T10209] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.776673][T10209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.097074][T10209] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.141046][ T9858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.183967][ T9858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.691115][T10256] ALSA: mixer_oss: invalid index 40000 [ 545.895885][ T10] IPVS: starting estimator thread 0... [ 545.921726][T10261] loop8: detected capacity change from 0 to 2048 [ 545.947090][T10261] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 545.974416][T10261] NILFS (loop8): mounting unchecked fs [ 546.004387][T10261] NILFS (loop8): recovery required for readonly filesystem [ 546.201296][T10270] IPVS: using max 24 ests per chain, 57600 per kthread [ 546.294737][T10261] NILFS (loop8): write access will be enabled during recovery [ 546.729056][ T9858] team0: Port device team_slave_0 added [ 546.777407][ T9858] team0: Port device team_slave_1 added [ 546.794925][T10261] NILFS (loop8): norecovery option specified, skipping roll-forward recovery [ 547.869536][ T9933] udevd[9933]: incorrect nilfs2 checksum on /dev/loop8 [ 548.872202][T10282] NILFS (loop8): couldn't remount because the filesystem is in an incomplete recovery state [ 550.279361][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 550.292350][ T9933] udevd[9933]: incorrect nilfs2 checksum on /dev/loop8 [ 550.583136][ T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.621408][ T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.680750][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.709051][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.779747][T10284] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 550.824400][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 550.899082][T10038] chnl_net:caif_netlink_parms(): no params data found [ 550.944540][T10301] netlink: 'syz.5.1066': attribute type 11 has an invalid length. [ 551.217789][T10302] loop8: detected capacity change from 0 to 1024 [ 551.230633][ T10] usb 7-1: USB disconnect, device number 5 [ 552.352009][T10315] befs: (nullb0): invalid magic header [ 553.907052][T10302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.019948][T10302] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.008087][T10324] sctp: failed to load transform for md5: -2 [ 556.141339][ T7345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.242681][T10346] overlayfs: failed to clone upperpath [ 556.299575][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 556.313586][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.355905][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 556.373820][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 556.381451][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 556.886812][T10365] loop6: detected capacity change from 0 to 1024 [ 557.193784][T10038] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.834672][T10038] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.879055][T10038] bridge_slave_0: entered allmulticast mode [ 557.887200][T10038] bridge_slave_0: entered promiscuous mode [ 557.960330][T10038] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.968547][T10038] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.010850][T10038] bridge_slave_1: entered allmulticast mode [ 558.018815][T10038] bridge_slave_1: entered promiscuous mode [ 558.490279][ T5858] Bluetooth: hci0: command tx timeout [ 559.469069][T10038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.657866][T10038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.659281][ T5858] Bluetooth: hci0: command tx timeout [ 561.958103][ T30] audit: type=1800 audit(1752445643.253:107): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1083" name="nullb0" dev="tmpfs" ino=1515 res=0 errno=0 [ 562.189670][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.198382][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.746369][ T5858] Bluetooth: hci0: command tx timeout [ 562.906260][T10038] team0: Port device team_slave_0 added [ 563.015883][T10038] team0: Port device team_slave_1 added [ 564.854075][T10444] loop8: detected capacity change from 0 to 128 [ 564.930470][ T5861] Bluetooth: hci0: command tx timeout [ 564.949657][T10038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.056506][T10311] udevd[10311]: incorrect ext4 checksum on /dev/loop8 [ 565.066120][T10444] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 565.082567][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.894899][T10038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.717700][T10038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.758906][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 566.794830][T10038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.841631][T10038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.132320][ T972] libceph: connect (1)[c::]:6789 error -101 [ 569.207954][ T6017] bridge_slave_1: left allmulticast mode [ 569.214134][ T6017] bridge_slave_1: left promiscuous mode [ 569.220024][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.223406][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 570.131527][ T972] libceph: connect (1)[c::]:6789 error -101 [ 570.152785][T10460] ceph: No mds server is up or the cluster is laggy [ 570.160633][ T6017] bridge_slave_0: left allmulticast mode [ 570.166292][ T6017] bridge_slave_0: left promiscuous mode [ 570.393753][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.409800][ T972] libceph: mon0 (1)[c::]:6789 connect error [ 570.443000][ T6017] bridge_slave_1: left allmulticast mode [ 571.409414][ T6017] bridge_slave_1: left promiscuous mode [ 571.415231][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.443560][ T6017] bridge_slave_0: left allmulticast mode [ 572.225591][ T10] libceph: connect (1)[c::]:6789 error -101 [ 572.239443][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 572.587905][ T6017] bridge_slave_0: left promiscuous mode [ 572.593845][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.628746][ T10] libceph: connect (1)[c::]:6789 error -101 [ 572.644974][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 575.053848][T10495] delete_channel: no stack [ 575.235455][ T30] audit: type=1800 audit(1752445662.530:108): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1101" name="nullb0" dev="tmpfs" ino=1386 res=0 errno=0 [ 575.309110][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.620979][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.929096][ T6017] bond0 (unregistering): Released all slaves [ 576.184207][ T842] Process accounting resumed [ 578.004332][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.281333][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.268740][ T6017] bond0 (unregistering): Released all slaves [ 579.811721][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 580.601336][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 580.610323][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 580.620543][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 581.199732][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 581.727653][T10558] loop6: detected capacity change from 0 to 40427 [ 581.815322][T10558] F2FS-fs (loop6): invalid crc value [ 581.929982][T10558] F2FS-fs (loop6): Start checkpoint disabled! [ 582.125548][T10558] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 582.192099][T10577] overlayfs: failed to resolve './file0': -2 [ 583.320634][ T5861] Bluetooth: hci3: command tx timeout [ 585.426333][ T5861] Bluetooth: hci3: command tx timeout [ 585.477622][ T6017] hsr_slave_0: left promiscuous mode [ 585.561353][ T6017] hsr_slave_1: left promiscuous mode [ 585.562159][ T6617] kworker/u8:12: attempt to access beyond end of device [ 585.562159][ T6617] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 585.627673][ T6617] CPU: 1 UID: 0 PID: 6617 Comm: kworker/u8:12 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 585.627709][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 585.627726][ T6617] Workqueue: writeback wb_workfn (flush-7:6) [ 585.627774][ T6617] Call Trace: [ 585.627785][ T6617] [ 585.627795][ T6617] dump_stack_lvl+0x189/0x250 [ 585.627836][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.627865][ T6617] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 585.627905][ T6617] ? __pfx_queue_work_on+0x10/0x10 [ 585.627941][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.627990][ T6617] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 585.628029][ T6617] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 585.628069][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.628098][ T6617] ? f2fs_hw_is_readonly+0x39b/0x470 [ 585.628143][ T6617] f2fs_handle_critical_error+0x37c/0x540 [ 585.628191][ T6617] f2fs_write_end_io+0x495/0x810 [ 585.628221][ T6617] ? blkg_put+0x22/0x240 [ 585.628277][ T6617] __submit_merged_bio+0x27a/0x6a0 [ 585.628329][ T6617] __submit_merged_write_cond+0x255/0x530 [ 585.628378][ T6617] f2fs_write_data_pages+0x261d/0x3000 [ 585.628472][ T6617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 585.628627][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.628662][ T6617] ? f2fs_write_meta_pages+0x357/0x450 [ 585.628716][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.628744][ T6617] ? __lock_acquire+0xab9/0xd20 [ 585.628776][ T6617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 585.628816][ T6617] do_writepages+0x32e/0x550 [ 585.628852][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.628879][ T6617] ? reacquire_held_locks+0x127/0x1d0 [ 585.628909][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.628907][ T6617] ? writeback_sb_inodes+0x372/0x1000 [ 585.628948][ T6617] __writeback_single_inode+0x145/0xff0 [ 585.628976][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629005][ T6617] ? do_raw_spin_unlock+0x122/0x240 [ 585.629049][ T6617] writeback_sb_inodes+0x6b5/0x1000 [ 585.629098][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629150][ T6617] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 585.629248][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629276][ T6617] ? rcu_is_watching+0x15/0xb0 [ 585.629306][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629349][ T6617] wb_writeback+0x43b/0xaf0 [ 585.629390][ T6617] ? queue_io+0x3b1/0x590 [ 585.629424][ T6617] ? __pfx_wb_writeback+0x10/0x10 [ 585.629465][ T6617] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.629511][ T6617] wb_workfn+0x409/0xef0 [ 585.629574][ T6617] ? __pfx_wb_workfn+0x10/0x10 [ 585.629620][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629648][ T6617] ? __lock_acquire+0xab9/0xd20 [ 585.629692][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629725][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.629762][ T6617] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.629797][ T6617] ? process_scheduled_works+0x9ef/0x17b0 [ 585.629826][ T6617] ? process_scheduled_works+0x9ef/0x17b0 [ 585.629860][ T6617] process_scheduled_works+0xae1/0x17b0 [ 585.629938][ T6617] ? __pfx_process_scheduled_works+0x10/0x10 [ 585.629980][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.630022][ T6617] worker_thread+0x8a0/0xda0 [ 585.630095][ T6617] kthread+0x711/0x8a0 [ 585.630137][ T6617] ? __pfx_worker_thread+0x10/0x10 [ 585.630168][ T6617] ? __pfx_kthread+0x10/0x10 [ 585.630204][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.630239][ T6617] ? _raw_spin_unlock_irq+0x23/0x50 [ 585.630274][ T6617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 585.630302][ T6617] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.630339][ T6617] ? __pfx_kthread+0x10/0x10 [ 585.630377][ T6617] ret_from_fork+0x3fc/0x770 [ 585.630410][ T6617] ? __pfx_ret_from_fork+0x10/0x10 [ 585.630448][ T6617] ? __switch_to_asm+0x39/0x70 [ 585.630481][ T6617] ? __switch_to_asm+0x33/0x70 [ 585.630513][ T6617] ? __pfx_kthread+0x10/0x10 [ 585.630552][ T6617] ret_from_fork_asm+0x1a/0x30 [ 585.630611][ T6617] [ 585.651526][ T6617] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 587.292090][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.449305][ T5861] Bluetooth: hci3: command tx timeout [ 588.692246][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 589.281053][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 589.529439][ T5861] Bluetooth: hci3: command tx timeout [ 591.907510][T10665] loop6: detected capacity change from 0 to 64 [ 593.237720][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.249390][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.257186][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.265995][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.285320][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.292190][T10671] hfs: request for non-existent node 327680 in B*Tree [ 593.319019][T10670] syz.8.1133 (10670): drop_caches: 2 [ 593.811970][ T6102] hfs: request for non-existent node 327680 in B*Tree [ 594.425831][ T6102] hfs: request for non-existent node 327680 in B*Tree [ 594.488077][ T6017] team0 (unregistering): Port device team_slave_1 removed [ 594.757891][ T6017] team0 (unregistering): Port device team_slave_0 removed [ 594.892672][T10679] loop6: detected capacity change from 0 to 512 [ 595.028478][T10679] EXT4-fs (loop6): 1 orphan inode deleted [ 595.038840][T10679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.094418][T10679] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.078460][ T6152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.297851][T10691] fuse: Bad value for 'fd' [ 597.754253][T10700] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1142'. [ 597.764117][T10700] netlink: zone id is out of range [ 597.769951][T10700] netlink: get zone limit has 8 unknown bytes [ 601.094461][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.113369][T10711] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 601.129251][T10658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.203836][T10658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.232721][T10658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.570377][T10716] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 601.577031][T10716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 601.585332][T10716] vhci_hcd vhci_hcd.0: Device attached [ 602.175482][T10355] chnl_net:caif_netlink_parms(): no params data found [ 602.250365][T10717] vhci_hcd: connection closed [ 602.253052][ T59] vhci_hcd: stop threads [ 602.272774][ T59] vhci_hcd: release socket [ 602.279261][T10538] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 602.302349][ T59] vhci_hcd: disconnect device [ 605.911734][T10742] loop6: detected capacity change from 0 to 40427 [ 606.621943][T10742] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 606.629891][T10742] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 606.762343][T10742] F2FS-fs (loop6): invalid crc value [ 606.889944][T10742] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 606.897028][T10742] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 608.166570][T10538] vhci_hcd: vhci_device speed not set [ 608.353555][T10761] Invalid source name [ 608.357648][T10761] UBIFS error (pid: 10761): cannot open "./file0", error -22 [ 609.257359][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.309444][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.316689][T10355] bridge_slave_0: entered allmulticast mode [ 609.597711][T10355] bridge_slave_0: entered promiscuous mode [ 610.119001][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.143694][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.265887][T10355] bridge_slave_1: entered allmulticast mode [ 610.283946][T10355] bridge_slave_1: entered promiscuous mode [ 610.724746][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.834388][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.930280][T10540] chnl_net:caif_netlink_parms(): no params data found [ 612.150708][T10797] loop8: detected capacity change from 0 to 32768 [ 612.785476][ T987] bridge_slave_1: left allmulticast mode [ 612.785500][ T987] bridge_slave_1: left promiscuous mode [ 612.785683][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.926296][ T987] bridge_slave_0: left allmulticast mode [ 612.954250][ T987] bridge_slave_0: left promiscuous mode [ 612.999653][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.540580][T10809] loop6: detected capacity change from 0 to 512 [ 615.579819][T10821] random: crng reseeded on system resumption [ 615.593514][T10809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.651453][T10809] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 616.179669][ T5041] Bluetooth: hci0: Frame reassembly failed (-84) [ 617.849313][ T5858] Bluetooth: hci0: command 0x1003 tx timeout [ 617.849330][ T5861] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 618.282126][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.643638][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.669119][ T6152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.729406][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.749390][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.783035][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.807864][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.820881][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.870370][ T987] bond0 (unregistering): Released all slaves [ 619.999388][T10540] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.006567][T10540] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.059407][T10540] bridge_slave_0: entered allmulticast mode [ 620.082855][T10540] bridge_slave_0: entered promiscuous mode [ 620.091656][T10540] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.098833][T10540] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.106113][T10540] bridge_slave_1: entered allmulticast mode [ 620.365877][T10540] bridge_slave_1: entered promiscuous mode [ 620.387554][T10851] overlayfs: failed to clone lowerpath [ 622.014102][ T5858] Bluetooth: hci0: command tx timeout [ 622.649411][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.671708][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.835713][T10872] fuse: Bad value for 'group_id' [ 622.840944][T10872] fuse: Bad value for 'group_id' [ 623.476748][ T987] team0 (unregistering): Port device team_slave_1 removed [ 623.523208][ T987] team0 (unregistering): Port device team_slave_0 removed [ 623.703745][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.710564][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.885004][T10879] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 623.900393][T10879] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 623.908270][T10879] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 623.919795][T10879] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 623.927682][T10879] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 624.307979][ T5858] Bluetooth: hci0: command tx timeout [ 624.684777][T10864] tipc: Started in network mode [ 624.715027][T10864] tipc: Node identity 4, cluster identity 4711 [ 624.778509][T10864] tipc: Node number set to 4 [ 624.805793][T10540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.877875][T10540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.949926][T10878] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.958686][T10878] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.967870][T10878] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.978170][T10878] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.330869][ T5863] Bluetooth: hci0: command tx timeout [ 626.743264][T10540] team0: Port device team_slave_0 added [ 626.791805][T10540] team0: Port device team_slave_1 added [ 627.262316][T10540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.318558][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.360690][T10540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.388136][T10540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.699401][ T5863] Bluetooth: hci0: command tx timeout [ 629.090036][T10540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.496637][T10540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.546883][T10540] hsr_slave_0: entered promiscuous mode [ 633.571471][T10540] hsr_slave_1: entered promiscuous mode [ 633.910796][T10958] loop6: detected capacity change from 0 to 32768 [ 634.718138][T10958] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 635.976614][T10958] XFS (loop6): Ending clean mount [ 635.994337][T10958] XFS (loop6): Quotacheck needed: Please wait. [ 636.074688][T10958] XFS (loop6): Quotacheck: Done. [ 636.110085][ T30] audit: type=1804 audit(1752445729.393:109): pid=10958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1197" name="/newroot/174/file0/bus" dev="loop6" ino=9290 res=1 errno=0 [ 636.794990][ T30] audit: type=1804 audit(1752445729.873:110): pid=10983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1197" name="/newroot/174/file0/bus" dev="loop6" ino=9290 res=1 errno=0 [ 636.965469][ T6152] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 637.288925][ T987] bridge_slave_1: left allmulticast mode [ 637.305201][ T987] bridge_slave_1: left promiscuous mode [ 637.321459][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.583251][ T987] bridge_slave_0: left allmulticast mode [ 638.617535][ T987] bridge_slave_0: left promiscuous mode [ 638.650856][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.830116][T11022] fuse: Bad value for 'fd' [ 641.116224][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.109872][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.120555][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.128323][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.136843][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.145852][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.264251][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.837166][ T987] bond0 (unregistering): Released all slaves [ 644.249292][ T5863] Bluetooth: hci3: command tx timeout [ 644.279222][ T9431] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 644.436243][ T9431] usb 9-1: device descriptor read/64, error -71 [ 644.951888][T11067] program syz.6.1218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.709471][ T9431] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 646.307707][T11075] loop6: detected capacity change from 0 to 16 [ 646.328930][T11075] erofs (device loop6): mounted with root inode @ nid 36. [ 646.336136][ T5863] Bluetooth: hci3: command tx timeout [ 646.424808][ T5863] erofs (device loop6): failed to decompress -26 in[46, 0] out[9000] [ 646.441921][T11075] erofs (device loop6): failed to decompress -26 in[46, 4050] out[8192] [ 646.450533][T11075] erofs (device loop6): read error -117 @ 0 of nid 89 [ 646.509640][ T30] audit: type=1800 audit(1752445739.743:111): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1219" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 646.748399][T11073] 9pnet_fd: Insufficient options for proto=fd [ 648.437095][ T5863] Bluetooth: hci3: command tx timeout [ 649.914933][T11088] loop6: detected capacity change from 0 to 2048 [ 650.036512][T11088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.489586][ T5858] Bluetooth: hci3: command tx timeout [ 651.309501][ T9431] usb 9-1: device descriptor read/64, error -110 [ 651.685450][ T9431] usb usb9-port1: attempt power cycle [ 651.749450][T11102] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 651.772655][T11102] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 651.785339][T11102] EXT4-fs (loop6): This should not happen!! Data will be lost [ 651.785339][T11102] [ 651.797429][T11102] EXT4-fs (loop6): Total free blocks count 0 [ 651.803676][T11102] EXT4-fs (loop6): Free/Dirty block details [ 651.898999][T11102] EXT4-fs (loop6): free_blocks=2415919504 [ 651.942535][T11102] EXT4-fs (loop6): dirty_blocks=32 [ 651.947674][T11102] EXT4-fs (loop6): Block reservation details [ 652.052653][T11102] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 653.285811][T10838] chnl_net:caif_netlink_parms(): no params data found [ 654.068380][ T6152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.433265][T11162] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1234'. [ 657.443336][T11162] unsupported nlmsg_type 40 [ 659.011472][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.036282][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.056001][T10838] bridge_slave_0: entered allmulticast mode [ 659.149454][T10838] bridge_slave_0: entered promiscuous mode [ 659.159940][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1236'. [ 659.186272][T11038] chnl_net:caif_netlink_parms(): no params data found [ 659.459518][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.459639][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.459844][T10838] bridge_slave_1: entered allmulticast mode [ 659.461858][T10838] bridge_slave_1: entered promiscuous mode [ 660.413264][T11186] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 660.421101][T11186] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1239'. [ 660.637484][T11184] loop8: detected capacity change from 0 to 4096 [ 660.767693][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.496379][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.138138][T10838] team0: Port device team_slave_0 added [ 662.182557][T10838] team0: Port device team_slave_1 added [ 662.476113][T11038] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.527023][T11038] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.561562][T11038] bridge_slave_0: entered allmulticast mode [ 662.655438][T11038] bridge_slave_0: entered promiscuous mode [ 662.669595][ T987] bridge_slave_1: left allmulticast mode [ 662.675262][ T987] bridge_slave_1: left promiscuous mode [ 662.789530][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.964714][ T987] bridge_slave_0: left allmulticast mode [ 662.971589][ T987] bridge_slave_0: left promiscuous mode [ 662.977270][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.118112][T11229] sctp: [Deprecated]: syz.5.1246 (pid 11229) Use of int in maxseg socket option. [ 663.118112][T11229] Use struct sctp_assoc_value instead [ 663.136931][T11229] netlink: 'syz.5.1246': attribute type 10 has an invalid length. [ 663.935286][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.632048][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.763851][ T987] bond0 (unregistering): Released all slaves [ 664.873058][T11239] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1248'. [ 664.948487][T11038] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.019741][T11038] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.087138][T11038] bridge_slave_1: entered allmulticast mode [ 665.113456][T11038] bridge_slave_1: entered promiscuous mode [ 665.147293][T11229] veth0_vlan: left promiscuous mode [ 665.171254][T11229] veth0_vlan: entered promiscuous mode [ 665.207323][T11229] team0: Device veth0_vlan failed to register rx_handler [ 665.401096][ T987] hsr_slave_0: left promiscuous mode [ 665.401652][ T987] hsr_slave_1: left promiscuous mode [ 665.402185][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.402699][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.309909][T11245] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1250'. [ 667.022672][T11249] overlayfs: failed to clone upperpath [ 667.964412][ T987] team0 (unregistering): Port device team_slave_1 removed [ 668.491957][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.076990][ T987] team0 (unregistering): Port device team_slave_0 removed [ 670.635334][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.647908][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.849227][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.972126][T11038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.119426][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.126411][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.174024][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.188199][T11038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.377809][T11038] team0: Port device team_slave_0 added [ 673.418723][T11038] team0: Port device team_slave_1 added [ 673.508415][T11038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.529986][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.599623][T11038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.621368][T11038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.628317][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.019379][T11038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.701614][ T5858] Bluetooth: Frame is too long (len 10, expected len 4) [ 677.113516][T11309] 9pnet_fd: Insufficient options for proto=fd [ 677.349560][T11309] lo speed is unknown, defaulting to 1000 [ 677.356294][T11309] lo speed is unknown, defaulting to 1000 [ 677.398628][T11309] lo speed is unknown, defaulting to 1000 [ 677.464941][T11309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 677.611073][T11309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 677.723018][T11309] lo speed is unknown, defaulting to 1000 [ 677.731048][T11309] lo speed is unknown, defaulting to 1000 [ 677.739746][T11309] lo speed is unknown, defaulting to 1000 [ 677.747425][T11309] lo speed is unknown, defaulting to 1000 [ 677.755966][T11309] lo speed is unknown, defaulting to 1000 [ 677.763753][T11309] lo speed is unknown, defaulting to 1000 [ 679.858707][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 679.889462][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 679.899511][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 679.930846][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 679.940672][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 681.944307][T11338] loop6: detected capacity change from 0 to 1024 [ 682.099326][ T5858] Bluetooth: hci0: command tx timeout [ 682.162077][T11038] hsr_slave_0: entered promiscuous mode [ 682.185570][T11342] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 682.194281][T11038] hsr_slave_1: entered promiscuous mode [ 683.025347][T11338] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 683.857107][ T987] bridge_slave_1: left allmulticast mode [ 683.879367][ T987] bridge_slave_1: left promiscuous mode [ 683.885211][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.000181][ T987] bridge_slave_0: left allmulticast mode [ 684.008863][ T987] bridge_slave_0: left promiscuous mode [ 684.180400][ T5858] Bluetooth: hci0: command tx timeout [ 684.217477][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.140543][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.147954][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.718771][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.753956][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.768387][ T987] bond0 (unregistering): Released all slaves [ 685.961916][T11326] lo speed is unknown, defaulting to 1000 [ 686.899203][ T5858] Bluetooth: hci0: command tx timeout [ 688.131836][T11098] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 688.598892][T11098] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.752263][T11098] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 688.889740][T11098] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.969863][ T5858] Bluetooth: hci0: command tx timeout [ 688.982699][T11098] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.992603][T11098] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 689.008602][T11098] usb 9-1: string descriptor 0 read error: -71 [ 689.019267][T11098] usb 9-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 689.469916][T11382] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 689.510329][T11098] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.561597][T11098] usb 9-1: config 0 descriptor?? [ 689.567135][T11098] usb 9-1: can't set config #0, error -71 [ 689.576133][T11098] usb 9-1: USB disconnect, device number 11 [ 689.581769][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.714780][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 691.371555][T11402] No such timeout policy "syz1" [ 692.009319][T11397] loop8: detected capacity change from 0 to 1024 [ 692.193235][T11402] loop6: detected capacity change from 0 to 32768 [ 692.310012][T11397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.324987][T11402] XFS (loop6): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 692.548754][T11397] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.580490][ T987] team0 (unregistering): Port device team_slave_1 removed [ 693.623489][ T7345] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.641153][T11402] XFS (loop6): Ending clean mount [ 693.653079][T11402] XFS (loop6): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b [ 693.687160][ T987] team0 (unregistering): Port device team_slave_0 removed [ 699.761698][T11453] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 699.814961][T11453] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 699.822934][T11453] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 699.844214][T11453] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 699.852132][T11453] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 700.464390][T11452] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.473265][T11452] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.482037][T11452] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.490943][T11452] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 701.328677][T11457] tipc: Started in network mode [ 701.359155][T11457] tipc: Node identity 4, cluster identity 4711 [ 701.365323][T11457] tipc: Node number set to 4 [ 702.924141][T11470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.718620][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 703.749812][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 703.874177][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 704.639285][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 704.705048][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 705.465981][T11494] 9pnet_fd: Insufficient options for proto=fd [ 705.505814][T11326] chnl_net:caif_netlink_parms(): no params data found [ 706.164686][T11479] lo speed is unknown, defaulting to 1000 [ 706.815635][ T5858] Bluetooth: hci6: command tx timeout [ 708.014957][T11519] 9pnet_fd: Insufficient options for proto=fd [ 708.649334][T11518] Driver unsupported XDP return value 0 on prog (id 216) dev N/A, expect packet loss! [ 708.902510][ T5858] Bluetooth: hci6: command tx timeout [ 709.030044][T11525] loop6: detected capacity change from 0 to 1024 [ 709.109461][T11098] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 709.493192][T11527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 709.625923][T11098] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 709.668782][T11530] hfsplus: found bad thread record in catalog [ 710.979245][ T5858] Bluetooth: hci6: command tx timeout [ 711.187300][ T30] audit: type=1800 audit(1752445804.473:112): pid=11530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1303" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 711.219187][T11098] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 711.329313][T11098] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 711.341049][T11098] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.351353][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.369378][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.377132][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.402387][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.410684][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.223309][ T6618] hfsplus: b-tree write err: -5, ino 4 [ 713.051206][ T5863] Bluetooth: hci6: command tx timeout [ 713.156822][ T987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.199468][ T987] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.354475][T11528] lo speed is unknown, defaulting to 1000 [ 713.373992][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.400496][T11326] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.416804][T11326] bridge_slave_0: entered allmulticast mode [ 713.426505][T11326] bridge_slave_0: entered promiscuous mode [ 713.440293][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.447560][T11326] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.458723][T11326] bridge_slave_1: entered allmulticast mode [ 713.467697][ T5863] Bluetooth: hci3: command tx timeout [ 713.486981][T11326] bridge_slave_1: entered promiscuous mode [ 713.940099][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1309'. [ 714.374046][T11555] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[11555] [ 714.432124][ T987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 714.474676][ T987] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.518822][T11326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.579210][T11556] macsec1: entered allmulticast mode [ 714.589528][T11556] macvlan0: entered allmulticast mode [ 714.600322][T11556] veth1_vlan: entered allmulticast mode [ 714.727940][T11326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.072686][T11568] 9pnet_fd: Insufficient options for proto=fd [ 715.189004][T11098] usb 9-1: can't set config #27, error -71 [ 715.219377][T11098] usb 9-1: USB disconnect, device number 12 [ 715.531142][ T5863] Bluetooth: hci3: command tx timeout [ 716.347102][T11579] loop6: detected capacity change from 0 to 512 [ 717.022326][T11579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.054652][ T987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.067391][ T987] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.093714][T11579] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 717.326933][ T987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.344795][ T987] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.972914][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 718.102419][T11596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1316'. [ 718.254181][T11593] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.1314: mark_inode_dirty error [ 718.489974][ T5863] Bluetooth: hci3: command tx timeout [ 718.550775][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 718.556389][T11326] team0: Port device team_slave_0 added [ 718.576092][T11595] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 718.936646][T11595] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.1314: mark_inode_dirty error [ 719.013650][T11595] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 719.052561][T11595] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1314: mark_inode_dirty error [ 719.081331][T11595] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 719.095092][T11595] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.1314: mark_inode_dirty error [ 719.150224][T11591] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1314: corrupted inode contents [ 719.188896][T11326] team0: Port device team_slave_1 added [ 719.917707][ T6152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.178213][T11614] loop6: detected capacity change from 0 to 1024 [ 720.222088][T11614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 720.235114][T11614] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.257677][T11620] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 720.285208][T11615] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(14) [ 720.291833][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 720.300303][T11621] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 720.306907][T11621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 720.316383][T11615] vhci_hcd vhci_hcd.0: Device attached [ 720.326332][T11621] vhci_hcd vhci_hcd.0: Device attached [ 720.363860][T11615] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(16) [ 720.370491][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 720.395385][T11615] vhci_hcd vhci_hcd.0: Device attached [ 720.408731][ T6152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.428491][T11326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.451057][T11621] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(21) [ 720.458018][T11621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 720.472872][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.512946][T11621] vhci_hcd vhci_hcd.0: Device attached [ 720.517664][T11326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.569280][T11098] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 720.569304][ T5863] Bluetooth: hci3: command tx timeout [ 720.594248][T11615] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(20) [ 720.600968][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 720.624863][T11326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.636938][T11326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.653143][T11621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 720.689209][T11615] vhci_hcd vhci_hcd.0: Device attached [ 720.703675][T11326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.757572][T11633] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(25) [ 720.764198][T11633] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 720.769809][T11615] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 720.788794][T11637] loop6: detected capacity change from 0 to 64 [ 720.842442][T11633] vhci_hcd vhci_hcd.0: Device attached [ 720.934216][T11479] chnl_net:caif_netlink_parms(): no params data found [ 721.125412][T11615] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(33) [ 721.132061][T11615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 721.153115][T11615] vhci_hcd vhci_hcd.0: Device attached [ 721.239718][T11645] [ 721.242075][T11645] ====================================================== [ 721.249086][T11645] WARNING: possible circular locking dependency detected [ 721.256100][T11645] 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 Not tainted [ 721.263288][T11645] ------------------------------------------------------ [ 721.270304][T11645] syz.6.1322/11645 is trying to acquire lock: [ 721.276365][T11645] ffff8880275280b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 721.285730][T11645] [ 721.285730][T11645] but task is already holding lock: [ 721.293088][T11645] ffff888029689af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 721.303907][T11645] [ 721.303907][T11645] which lock already depends on the new lock. [ 721.303907][T11645] [ 721.314302][T11645] [ 721.314302][T11645] the existing dependency chain (in reverse order) is: [ 721.323311][T11645] [ 721.323311][T11645] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 721.332541][T11645] lock_acquire+0x120/0x360 [ 721.337573][T11645] __mutex_lock+0x182/0xe80 [ 721.342599][T11645] hfs_extend_file+0xda/0x1230 [ 721.347887][T11645] hfs_bmap_reserve+0x107/0x430 [ 721.353261][T11645] __hfs_ext_write_extent+0x1fa/0x470 [ 721.359157][T11645] __hfs_ext_cache_extent+0x6b/0x9b0 [ 721.364966][T11645] hfs_extend_file+0x316/0x1230 [ 721.370343][T11645] hfs_get_block+0x3d7/0xbd0 [ 721.375459][T11645] __blockdev_direct_IO+0x16dd/0x33d0 [ 721.381360][T11645] hfs_direct_IO+0x119/0x220 [ 721.386472][T11645] generic_file_direct_write+0x1db/0x3e0 [ 721.392629][T11645] __generic_file_write_iter+0x11d/0x230 [ 721.398787][T11645] generic_file_write_iter+0x10f/0x540 [ 721.404767][T11645] do_iter_readv_writev+0x56e/0x7f0 [ 721.410497][T11645] vfs_writev+0x31a/0x960 [ 721.415362][T11645] do_writev+0x14d/0x2d0 [ 721.420140][T11645] do_syscall_64+0xfa/0x3b0 [ 721.425166][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.431585][T11645] [ 721.431585][T11645] -> #0 (&tree->tree_lock/1){+.+.}-{4:4}: [ 721.439524][T11645] validate_chain+0xb9b/0x2140 [ 721.444822][T11645] __lock_acquire+0xab9/0xd20 [ 721.450021][T11645] lock_acquire+0x120/0x360 [ 721.455050][T11645] __mutex_lock+0x182/0xe80 [ 721.460076][T11645] hfs_find_init+0x165/0x1e0 [ 721.465202][T11645] hfs_extend_file+0x2ee/0x1230 [ 721.470576][T11645] hfs_bmap_reserve+0x107/0x430 [ 721.475944][T11645] hfs_cat_create+0x1b3/0x640 [ 721.481144][T11645] hfs_mkdir+0x6c/0xe0 [ 721.485740][T11645] vfs_mkdir+0x306/0x510 [ 721.490510][T11645] do_mkdirat+0x247/0x590 [ 721.495356][T11645] __x64_sys_mkdirat+0x87/0xa0 [ 721.500641][T11645] do_syscall_64+0xfa/0x3b0 [ 721.505662][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.512073][T11645] [ 721.512073][T11645] other info that might help us debug this: [ 721.512073][T11645] [ 721.522294][T11645] Possible unsafe locking scenario: [ 721.522294][T11645] [ 721.529735][T11645] CPU0 CPU1 [ 721.535086][T11645] ---- ---- [ 721.540437][T11645] lock(&HFS_I(tree->inode)->extents_lock); [ 721.546415][T11645] lock(&tree->tree_lock/1); [ 721.553620][T11645] lock(&HFS_I(tree->inode)->extents_lock); [ 721.562118][T11645] lock(&tree->tree_lock/1); [ 721.566803][T11645] [ 721.566803][T11645] *** DEADLOCK *** [ 721.566803][T11645] [ 721.574931][T11645] 4 locks held by syz.6.1322/11645: [ 721.580117][T11645] #0: ffff888027cee428 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 721.589374][T11645] #1: ffff88802968a320 (&type->i_mutex_dir_key#16/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470 [ 721.600124][T11645] #2: ffff888043a160b0 (&tree->tree_lock){+.+.}-{4:4}, at: hfs_find_init+0x165/0x1e0 [ 721.609732][T11645] #3: ffff888029689af8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xda/0x1230 [ 721.620977][T11645] [ 721.620977][T11645] stack backtrace: [ 721.626860][T11645] CPU: 0 UID: 0 PID: 11645 Comm: syz.6.1322 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 721.626888][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.626902][T11645] Call Trace: [ 721.626912][T11645] [ 721.626921][T11645] dump_stack_lvl+0x189/0x250 [ 721.626954][T11645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.626982][T11645] ? __pfx__printk+0x10/0x10 [ 721.627014][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627046][T11645] ? print_lock_name+0xde/0x100 [ 721.627079][T11645] print_circular_bug+0x2ee/0x310 [ 721.627111][T11645] check_noncircular+0x134/0x160 [ 721.627145][T11645] validate_chain+0xb9b/0x2140 [ 721.627173][T11645] ? rcu_is_watching+0x15/0xb0 [ 721.627200][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627226][T11645] ? trace_sched_exit_tp+0x38/0x120 [ 721.627247][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627273][T11645] ? __schedule+0x1713/0x4d00 [ 721.627308][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627334][T11645] ? look_up_lock_class+0x74/0x170 [ 721.627371][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627397][T11645] ? register_lock_class+0x51/0x320 [ 721.627422][T11645] __lock_acquire+0xab9/0xd20 [ 721.627449][T11645] ? hfs_find_init+0x165/0x1e0 [ 721.627479][T11645] lock_acquire+0x120/0x360 [ 721.627501][T11645] ? hfs_find_init+0x165/0x1e0 [ 721.627539][T11645] __mutex_lock+0x182/0xe80 [ 721.627561][T11645] ? hfs_find_init+0x165/0x1e0 [ 721.627590][T11645] ? rcu_is_watching+0x15/0xb0 [ 721.627617][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627643][T11645] ? trace_irq_disable+0x37/0x110 [ 721.627677][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627703][T11645] ? preempt_schedule_irq+0xde/0x150 [ 721.627738][T11645] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 721.627774][T11645] ? hfs_find_init+0x165/0x1e0 [ 721.627806][T11645] ? __pfx___mutex_lock+0x10/0x10 [ 721.627827][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.627864][T11645] hfs_find_init+0x165/0x1e0 [ 721.627898][T11645] hfs_extend_file+0x2ee/0x1230 [ 721.627922][T11645] ? __pfx___mutex_trylock_common+0x10/0x10 [ 721.627956][T11645] ? __pfx_hfs_extend_file+0x10/0x10 [ 721.627979][T11645] ? trace_contention_end+0x39/0x120 [ 721.628008][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628050][T11645] ? __mutex_lock+0x330/0xe80 [ 721.628070][T11645] ? rcu_is_watching+0x15/0xb0 [ 721.628096][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628123][T11645] ? trace_irq_disable+0x37/0x110 [ 721.628157][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628183][T11645] ? preempt_schedule_irq+0xde/0x150 [ 721.628220][T11645] ? hfs_find_init+0x165/0x1e0 [ 721.628252][T11645] ? __pfx___mutex_lock+0x10/0x10 [ 721.628272][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628304][T11645] hfs_bmap_reserve+0x107/0x430 [ 721.628333][T11645] hfs_cat_create+0x1b3/0x640 [ 721.628354][T11645] ? preempt_schedule+0xae/0xc0 [ 721.628389][T11645] ? preempt_schedule_common+0x83/0xd0 [ 721.628423][T11645] ? __pfx_hfs_cat_create+0x10/0x10 [ 721.628443][T11645] ? preempt_schedule+0xae/0xc0 [ 721.628486][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628512][T11645] ? _raw_spin_unlock+0x3f/0x50 [ 721.628543][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628569][T11645] ? hfs_new_inode+0x7c9/0xba0 [ 721.628599][T11645] hfs_mkdir+0x6c/0xe0 [ 721.628622][T11645] vfs_mkdir+0x306/0x510 [ 721.628649][T11645] do_mkdirat+0x247/0x590 [ 721.628674][T11645] ? __pfx_do_mkdirat+0x10/0x10 [ 721.628700][T11645] ? srso_alias_return_thunk+0x5/0xfbef5 [ 721.628726][T11645] ? getname_flags+0x1e5/0x540 [ 721.628760][T11645] __x64_sys_mkdirat+0x87/0xa0 [ 721.628786][T11645] do_syscall_64+0xfa/0x3b0 [ 721.628809][T11645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.628831][T11645] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 721.628857][T11645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.628879][T11645] RIP: 0033:0x7f51af38d197 [ 721.628897][T11645] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.628917][T11645] RSP: 002b:00007f51b01dfe68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 721.628939][T11645] RAX: ffffffffffffffda RBX: 00007f51b01dfef0 RCX: 00007f51af38d197 [ 721.628956][T11645] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c [ 721.628972][T11645] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 [ 721.628988][T11645] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 [ 721.629003][T11645] R13: 00007f51b01dfeb0 R14: 0000000000000000 R15: 0000000000000000 [ 721.629026][T11645] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 722.428093][T11630] vhci_hcd: connection closed [ 722.428460][ T6016] vhci_hcd: stop threads [ 722.438131][T11627] vhci_hcd: connection closed [ 722.438298][T11622] vhci_hcd: connection closed [ 722.446731][T11618] vhci_hcd: connection reset by peer [ 722.447978][T11636] vhci_hcd: connection closed [ 722.451457][T11624] vhci_hcd: connection closed [ 722.539384][ T6016] vhci_hcd: release socket [ 722.587345][ T6016] vhci_hcd: disconnect device [ 722.601300][ T6016] vhci_hcd: stop threads [ 722.605547][ T6016] vhci_hcd: release socket [ 722.664356][ T6016] vhci_hcd: disconnect device [ 722.701739][ T6016] vhci_hcd: stop threads [ 722.705994][ T6016] vhci_hcd: release socket [ 722.728541][ T6016] vhci_hcd: disconnect device [ 722.737567][ T6016] vhci_hcd: stop threads [ 722.749115][ T6016] vhci_hcd: release socket [ 722.753585][ T6016] vhci_hcd: disconnect device [ 722.781714][ T6016] vhci_hcd: stop threads [ 722.785977][ T6016] vhci_hcd: release socket [ 722.829551][ T6016] vhci_hcd: disconnect device [ 722.847457][ T6016] vhci_hcd: stop threads [ 722.903993][ T6016] vhci_hcd: release socket [ 722.919304][ T6016] vhci_hcd: disconnect device [ 723.040301][ T987] bridge_slave_1: left allmulticast mode [ 723.045988][ T987] bridge_slave_1: left promiscuous mode [ 723.100000][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.199675][ T987] bridge_slave_0: left allmulticast mode [ 723.205352][ T987] bridge_slave_0: left promiscuous mode [ 723.230575][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.261892][ T987] bridge_slave_1: left allmulticast mode [ 723.267570][ T987] bridge_slave_1: left promiscuous mode [ 723.273700][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.294266][ T987] bridge_slave_0: left allmulticast mode [ 723.300419][ T987] bridge_slave_0: left promiscuous mode [ 723.306128][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.534158][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.544236][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.554397][ T987] bond0 (unregistering): Released all slaves [ 723.617945][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.628006][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.637615][ T987] bond0 (unregistering): Released all slaves [ 723.850399][T11641] vhci_hcd: connection closed [ 723.877246][ T7345] syz-executor (7345) used greatest stack depth: 15672 bytes left [ 723.905366][ T6016] vhci_hcd: stop threads [ 723.911929][ T6016] vhci_hcd: release socket [ 723.931075][ T6016] vhci_hcd: disconnect device [ 724.011597][ T987] hsr_slave_0: left promiscuous mode [ 724.029423][ T987] hsr_slave_1: left promiscuous mode [ 724.037506][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.049434][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.070972][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.078381][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.113410][ T987] hsr_slave_0: left promiscuous mode [ 724.131855][ T987] hsr_slave_1: left promiscuous mode [ 724.139404][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.159763][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.183641][ T987] veth1_macvtap: left promiscuous mode [ 724.192244][ T987] veth0_macvtap: left promiscuous mode [ 724.197827][ T987] veth1_vlan: left promiscuous mode [ 724.398542][ T987] team_slave_1 (unregistering): left promiscuous mode [ 724.406385][ T987] team0 (unregistering): Port device team_slave_1 removed [ 724.431014][ T987] team_slave_0 (unregistering): left promiscuous mode [ 724.438260][ T987] team0 (unregistering): Port device team_slave_0 removed [ 724.615999][ T987] team0 (unregistering): Port device team_slave_1 removed [ 724.638409][ T987] team0 (unregistering): Port device team_slave_0 removed [ 725.098466][ T987] IPVS: stop unused estimator thread 0... [ 725.176313][ T987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.191070][ T987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.245745][ T987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.257899][ T987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.318957][ T987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.331068][ T987] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.376226][ T987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.387540][ T987] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.500292][ T987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.512062][ T987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.557394][ T987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.569224][ T987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.607150][ T987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.619269][ T987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.667408][ T987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.679520][ T987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.690233][T11098] vhci_hcd: vhci_device speed not set [ 725.788470][ T987] bridge_slave_1: left allmulticast mode [ 725.794547][ T987] bridge_slave_1: left promiscuous mode [ 725.801595][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.810294][ T987] bridge_slave_0: left allmulticast mode [ 725.815991][ T987] bridge_slave_0: left promiscuous mode [ 725.822485][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.834027][ T987] bridge_slave_1: left allmulticast mode [ 725.840091][ T987] bridge_slave_1: left promiscuous mode [ 725.845777][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.855935][ T987] bridge_slave_0: left allmulticast mode [ 725.861661][ T987] bridge_slave_0: left promiscuous mode [ 725.867327][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.876907][ T987] bridge_slave_1: left allmulticast mode [ 725.882598][ T987] bridge_slave_1: left promiscuous mode [ 725.888316][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.897620][ T987] bridge_slave_0: left allmulticast mode [ 725.904643][ T987] bridge_slave_0: left promiscuous mode [ 725.912078][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.106675][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.117351][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.126892][ T987] bond0 (unregistering): Released all slaves [ 726.197521][ T987] bond0 (unregistering): Released all slaves [ 726.254670][ T987] bond0 (unregistering): Released all slaves [ 726.313663][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.323874][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.333858][ T987] bond0 (unregistering): Released all slaves [ 726.388964][ T987] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 726.423817][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.434266][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.444216][ T987] bond0 (unregistering): Released all slaves [ 726.544126][ T987] tipc: Left network mode [ 726.821595][ T987] hsr_slave_0: left promiscuous mode [ 726.827996][ T987] hsr_slave_1: left promiscuous mode [ 726.837767][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.847319][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.856830][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.864894][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.874258][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.881970][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.894499][ T987] hsr_slave_0: left promiscuous mode [ 726.901935][ T987] hsr_slave_1: left promiscuous mode [ 726.907707][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.917988][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.928589][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.937588][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.957284][ T987] veth1_macvtap: left promiscuous mode [ 726.963871][ T987] veth0_macvtap: left promiscuous mode [ 726.970593][ T987] veth1_vlan: left promiscuous mode [ 726.975878][ T987] veth0_vlan: left promiscuous mode [ 726.979903][ T9667] usb usb50-port1: attempt power cycle [ 726.988503][ T987] macvlan0: left allmulticast mode [ 726.993732][ T987] veth1_vlan: left allmulticast mode [ 727.000776][ T987] veth1_macvtap: left promiscuous mode [ 727.006280][ T987] veth0_macvtap: left promiscuous mode [ 727.012078][ T987] veth1_vlan: left promiscuous mode [ 727.248173][ T987] team0 (unregistering): Port device team_slave_1 removed [ 727.274371][ T987] team0 (unregistering): Port device team_slave_0 removed [ 727.439707][ T987] team0 (unregistering): Port device team_slave_1 removed [ 727.451150][ T987] team0 (unregistering): Port device team_slave_0 removed [ 727.591896][ T9667] usb usb50-port1: unable to enumerate USB device [ 727.688011][ T987] team0 (unregistering): Port device team_slave_1 removed [ 727.715707][ T987] team0 (unregistering): Port device team_slave_0 removed [ 727.822597][ T842] lo speed is unknown, defaulting to 1000 [ 727.828746][ T842] infiniband syz0: ib_query_port failed (-19)