last executing test programs: 2m11.589225104s ago: executing program 1 (id=347): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x60840, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x1000002, &(0x7f0000002040)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRESOCT], 0x9, 0x2d7, &(0x7f00000037c0)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r4, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @connect}], 0x1c) r5 = syz_open_dev$hidraw(&(0x7f0000000040), 0xfffffffffffffffb, 0x0) syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=iaciceland,umask=00000000000000000000005,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=iso8859-5,errors=continue,errors=continue,errors=remount-ro,iocharset=maccroatian,errors=continue,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002080), 0x80, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000020c0)=0x1000000) r7 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001940)=""/108, 0x6c}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2}, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000002200)=r0) write$tun(r0, &(0x7f0000001280)={@val={0x0, 0x9000}, @void, @llc={@snap={0xab, 0x0, '~', "57aae4", 0x6005, "2d2e4a397cf38eb5844e139f43d925229f392e1c2d9dcb56d18ac301e686f4a0896ec085c49a74ae77866abca39527ed03b34d9f40ca249981bb418aac3f968e01c2aca0c99bdaefd010bf99b39017d0cce5c400109e6c1c6bbe8ae85508e2053afd11410d40449a6eceab9e8aaaf3aeb2d5c5d71194dbb9fd20fd38f9c20e393a16356fa55c87e25fc28f487cbd4ccd434394db4d7debfa5f2c8b1439af7f88a87dca54fe3f7e7b75f39d44bd5e53ebe6d141156ec602752d8c541eab0f1c99f2c97cb91f590b82c51ee70ba7d4a3a366b238776b112a39ad2fcb774dfa236cba44af1417de30"}}}, 0xf3) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r5}, {@void, @actul_num={@val=0x2d, 0x7fffffffffffffff, 0x6d}}}) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000002100)=ANY=[@ANYRESDEC=0x0], 0x1, 0x8e, &(0x7f0000001f80)="$eJzszqENAlEQBNDhHOoKQNABPVwHKDxBgkNBUNcPrVACHSCwmEN8IOF7QnJ5L9lNZsfs5XGepU+GNhkq+8Nxu96VvZrmow1j0STpkiyTzPuSb13pJq/+ej9t3vPvfwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF5os6vx1eAYAAP//pJMkug==") 2m10.539548595s ago: executing program 1 (id=352): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x4, 0x6, 0x1f, 0xf4, 0x7f, 0x3f, 0x80, 0x2, 0x9, 0xff, 0x0, 0x0, 0x7f}, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x4}, 0x9c) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00', 0x37}, 0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x6b) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r6}}, 0x20) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) socket$key(0xf, 0x3, 0x2) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r8, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc802, &(0x7f0000000040)=ANY=[], 0x1, 0x679, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000320000000c009980000000000000000005001801ff000000"], 0x28}}, 0x0) 2m9.544056451s ago: executing program 1 (id=357): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}, {@usrquota}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") symlinkat(&(0x7f00000001c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file3\x00', 0x0) (fail_nth: 2) 2m9.202548841s ago: executing program 1 (id=368): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r5, 0x0) pread64(r4, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m5.435079687s ago: executing program 1 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x200a880, 0x0, 0x6, 0x0, &(0x7f0000000000)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x330b) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000500000010000000dc880000000201000000005f5f3000"], &(0x7f0000000840)=""/124, 0x29, 0x7c, 0x1, 0x100, 0x0, @void, @value}, 0x28) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\a\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000060000002c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000034000080004000000000014000600626f6e6430000000000000000000000008000300ff020000000000000000000000000001"], 0x78}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r8 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0xfffffffc, @remote, 0xf4}, 0x1c) getsockname$packet(r8, 0x0, &(0x7f00000008c0)) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r9, {0x10001}}, './file0\x00'}) execveat(r10, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={[&(0x7f0000000100)='ocfs2\x00']}, &(0x7f0000000300)={[&(0x7f0000000180)='\xdb}!][\x00', &(0x7f00000001c0)='!@^#\x00', &(0x7f0000000200)='ocfs2\x00', &(0x7f0000000240)='ocfs2\x00', &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', &(0x7f00000002c0)=',\x00']}, 0x1000) write$apparmor_exec(r9, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r9}, 0x8) write$P9_RLERRORu(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="00427d634a18b00432efa74028148826c6a6c22ffaffd5dfda7fd6a53958a60255"], 0xf) mount(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)='ocfs2\x00', 0x0, 0x0) fallocate(r9, 0x1, 0x2, 0x81) 2m4.375731869s ago: executing program 1 (id=379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000780)=""/203, 0xcb}], 0x1, 0x49, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee53673e959ae5adbc3f793917ad556654e4df993f2bbd4b9b9259efdcbd3c3c2d315cb1c92438cdea1792c390cef68d3926d44cd9361912518732211458bdc92f855c9c018e3a7b35da0d8c8f934dbc3cfba39a9fa99e1a76759d09e705e0e4d84a32987c661b2e3f58ca446ca835fabdaf163ae94f2a59481ab62298d4350ae9358fdbd2b1b20da4afaaf2982903c2805b6caf71719d0d74852ae8414baa491363af0d20a7ad133b81356c30e77d036ba519867fe35391c36ecd0464b40a3871637dc81af3c19f59f347749cb07ac25f96e0cbf84288d32aff6dcd9cd2ebbd905d53dc87b14002cf971df0b76c5171e392f78cd002fd34a28454a32531ab9fccb16820b462bd13005da9d2fbd0ed02a4a7527b9b40b939bbf0686d16fa3070f129ae48da709408dfdb12c661148e282d50794b34b2e15236bf2f967bba67a7c650a02743ec3b852b5511c1ab32efc7d85a97bb622935b72d5c06e7bde3f389172684a6e61c852f6ec2a323858f67f8f9dde9f9eaa26cfcf958dafe5ed23b6c06f094fa1550ce0a39447769218060cb9e78a0e6f61a08b629e2512d8972a2a337b0b6b97220d292af823b8800ef45e72089659a0b1cbc750d6491d55f9bde4d1c4abe796d6951be456b8ad327794ddc74042c9e303832ccbf2d2fcb6d01007b8cf0552b568af89adc9b198cbea6b8137ef70ad16919ade2bdbd29d23c78c04cce6dedf07598d33841d8f02f7ed5a349fddbc742ea7e742636a2cb4ff663192cb1102adcc019b92caac00f5a644afc2d03b68f933aa6b8eddd6c39a0de8913034a0b48ddabd39aee173350f3dfa0329c308fb94e3528e", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000001e80)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd74120604219", 0x8d}], 0x3}}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0), 0xbf) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m56.391759715s ago: executing program 3 (id=406): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r5, 0x0) pread64(r4, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m51.523360649s ago: executing program 3 (id=413): syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8) r3 = getuid() r4 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="02000000010005000000000002000400", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="040001000000000008000500", @ANYRES32=r4, @ANYBLOB="e6f2b475adfc65964d00"], 0x3c, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000c80)={0xb, 0xf, {0xffffffffffffffff}, {0xee01}, 0x6, 0x80000000}) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) 1m51.432858409s ago: executing program 3 (id=416): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffbf036}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x803e, &(0x7f0000000900)=[{&(0x7f0000000d40)="9b3837ab", 0x33fe0}], 0x1}}], 0x1, 0x44040050) 1m51.331693701s ago: executing program 3 (id=417): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$eJzs3L9u00AAx/Gf40BIQfwVf8RUCQmxkEBbqcpGFzZeAImhakNV4UJpWBohQV+CnZWJR+BNWBnagY2JQ2dfwHFSfHFIHOHvR2rj2Pfzndue765RIgCV9Sj+HuiMe26Mebcs6ekTSbVSmwZgxox7/GkAVE9I1wcq6mQjjMf/L4H09fvbrWP3dc5z/nCykSwS7PrhOJVvnhZ4lskfBfHj7fpwfknS+ZFwfXT+8jHJ383Uf8G3/a7+pUy+4Z1Prv/eneH8RUmXJF2WdEXSVUnXpPi01+UOpOrfztR/Kzl85NkMAAAAAAD+yq4+W4Mnvov+bL7lU/LB2L129fx8N+qOP+qhluQfFoyfdfWvTJlfzbQpl3vBteHyra1X0XbBNgBF1dL9P9/IHcK//2vsv7PCKft/Pc5/KJgGqq132H+xGUXdg7ltSJOm7FBZvNLmYONbbuFPdkM/kldGZv/TGNxM7Z5ln1TgCs/t96X8Mu9zyjR10DMe55n7xuvHyextBlXYQSm9pz/tCYNsP60PdaLPqT+kKDJhb/8fXJc9oQl/3yjCMu5OAGap/WZvv9077N/f3dvc6e50X66tdzrra6srnXY8LW9PtTgHsMj+DPpltwQAAAAAAAAAAAAAABR1Q9LNyWOnfrwHAAAAgMU1+RuDGhO/najsawQAAAAAAAAAAAAA4H/3KwAA//9/rD04") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) getdents64(r0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') (async) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) (async) 1m50.30556376s ago: executing program 3 (id=419): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x500) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x11) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) pwritev2(r3, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="6445bd42caf50d2d92470617282bd31df243e5b9b5e78220e02287f67b15ef3198a82f51d0d48b338755768661f50c1bc5f1d3b516ef890a8002954b4cc5711d19b19cb3a788d0f6a2d4008072deeb6c22359a25f6b45d311a95363a442c2576164af79de4e0fd3b70b2ce1b8e424cbc775199a2a1c92edd8280f57122a4578bad1cf1412a10b29fe4b9273f2f7e03a7a37435e0cbf9e8ff861ef1fc5c88ca500abadffa4beedcd4ed52044e33413ee30d32eae7c1b8a9191d08cb29349820cc671803e5f8de02c9411a", 0xca}, {&(0x7f00000009c0)="994ce88cf44f9ab71104f537be62e5caceb8b29cc30b49df0ccff71746a906bebd396f9e0b8dc8d5f7c62a9ddab313f404f6840c1258d061e268ef842b97467421781849e3579c423334960142fb31f2f0e45bf0ee101dc33cd7d3f510fa", 0x5e}, {&(0x7f0000000000)="274a97bba8417dadb59c6869aab21c7716678325aabdf78c2b48186cef661220eaabaa783df568172ca2cb7519334d0262ccb529ac731cc6", 0x38}, {&(0x7f0000000b00)="242d3cf209243c69098996fea78eb7371466a9006985649ac5ff7a446a03273251271efd54b92354addc16ebeab61fd4b1b433f420ae5022460649d7ba32f3efcea7a1036a2fcfe35fd5d816592234f8f90dbe828aeecb1e05e8bfea441202e114006fc0b2bdb956966066e557f58e097cad72b27d65590f7987308b0ae18f22fd0c4cb893ab6f4201d88f1f580722a5f778d908116a38b228da7e4fa89f6a1dcd5e009e89c7bfbf8f9c9a892e9926", 0xaf}, {&(0x7f0000000bc0)="2fcedecfadb876239f0248bc42aed53d26ecc12af7b346a95285183e36c0c8140749e19f297348086fbc467788a397553b47fc76fa53c1ff195c0d52e9872bfd7f4dd3eb4ff067ba08ea7545bfead28c415e2020550f9be3625b9ee6771a371ba952e13abce5985b596b8ada160dae9ac79f0c854b556d7b156acd758329c79c73e46e72d3d4f061849ebbe159f3d4322611e08cd185bc6bfdfe35ec4d892608ebce29e1461adafcb9b8139592e7c6149c00cf47661cb7a78a8818229582d68523", 0xc1}, {&(0x7f0000000180)="6bd548d78a7797f7da4730bbdcf1b52508ce455a532a740a68ae13fa68d483e4b62a22fb247efc2df474a945ac1a47f5776a9d109b37f8c1bc73e9f793", 0x3d}], 0x6, 0x6198, 0x1, 0xc) rseq(0x0, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f00000006c0)=[{&(0x7f00000000c0)='u', 0x1}], 0x1, 0x100000, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) 1m49.208558267s ago: executing program 32 (id=379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000780)=""/203, 0xcb}], 0x1, 0x49, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="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", 0x498}, {&(0x7f00000002c0)="e4d561e9744108000000e9b4ec081c8eb4534bc5b9284f843e2bc71745", 0x1d}, {&(0x7f0000001e80)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd74120604219", 0x8d}], 0x3}}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0), 0xbf) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m48.904188583s ago: executing program 3 (id=425): syz_socket_connect_nvme_tcp() unshare(0x68040200) socket(0x40000000002, 0x3, 0x2) r0 = socket(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0x0, 0x2, 0x12]}, &(0x7f00000001c0)=0x78) 1m48.66908085s ago: executing program 33 (id=425): syz_socket_connect_nvme_tcp() unshare(0x68040200) socket(0x40000000002, 0x3, 0x2) r0 = socket(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x2, 0x2, 0x6, 0x0, 0x2, 0x12]}, &(0x7f00000001c0)=0x78) 4.415602109s ago: executing program 2 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) 4.346030387s ago: executing program 2 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c0007", 0x7) socket(0x840000000002, 0x3, 0x100) timer_create(0x0, 0x0, 0x0) 2.518360858s ago: executing program 5 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b6, &(0x7f0000000280)="$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") 2.453069075s ago: executing program 5 (id=1010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x5, &(0x7f0000000100)) 2.304597183s ago: executing program 5 (id=1011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.995120669s ago: executing program 5 (id=1015): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000007c00), 0x109200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000007c40)={0xffff, 0xfffffff9, 0x3, 0x9, 0xfff, 0xffffffff}) 1.958384803s ago: executing program 5 (id=1017): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x84) 1.800005281s ago: executing program 4 (id=1020): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) 1.767318475s ago: executing program 0 (id=1022): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 1.747302618s ago: executing program 4 (id=1023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYBLOB="00000000000000003c00128009000100766c616e000000002c000280", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x6c}, 0x1, 0xba01}, 0x0) 1.653510099s ago: executing program 0 (id=1025): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.648069419s ago: executing program 4 (id=1026): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xcd9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 1.547837111s ago: executing program 5 (id=1028): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f0000000380)=@raw=[@ldst={0x1, 0x2, 0x6, 0x7, 0x5, 0x30}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='GPL\x00', 0xa89, 0xf9, &(0x7f00000004c0)=""/249, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xb, 0x401, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000640)=[{0x3, 0x2, 0x6, 0xa}, {0x3, 0x3, 0xb, 0x5}, {0x5, 0x2, 0x10, 0x2}, {0x1, 0x1, 0xf}, {0x3, 0x5, 0xc, 0xb}, {0x3, 0x1, 0x5282, 0x1}, {0x5, 0x1, 0x10}, {0x5, 0x2, 0x9, 0x5}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x101a0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x10, 0x1, 0x63, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0}, 0x40) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20022, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000240)) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="d3030000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000008e00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0xc5, 0xbb, &(0x7f0000000a00)=""/187, 0x41000, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x5, 0xffffffff, 0xb}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000c00)=[{0x2, 0x2, 0xc, 0x9}, {0x4, 0x2, 0x5}, {0x1, 0x2, 0x6, 0x2}, {0x5, 0x4, 0x2, 0xa}, {0x0, 0x5, 0x8, 0x1}, {0x0, 0x1, 0x2, 0x5}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r2, 0x25, 0x1, @val=@tcx={@void, @value=r9, @void, @void, r3}}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc0802}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) 1.514973174s ago: executing program 0 (id=1029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00004000005be300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 1.494740087s ago: executing program 4 (id=1030): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440), 0x6, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x400, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0) 1.458278801s ago: executing program 6 (id=1031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) 1.404031667s ago: executing program 2 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000b000000080003002657"], 0x1c}}, 0x0) 1.371410501s ago: executing program 6 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0908000000000000000001000000080001"], 0x60}}, 0x0) 1.365898482s ago: executing program 2 (id=1034): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x8, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setrlimit(0x7, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.095961113s ago: executing program 0 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 1.095714093s ago: executing program 6 (id=1036): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @multicast1, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x3, [{0x0, 0x6, "7f36c525"}]}]}}, "000600b2"}}}}}, 0x0) 306.124474ms ago: executing program 4 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 305.859924ms ago: executing program 2 (id=1038): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x1, 0x10061, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f0000000080)) 260.05761ms ago: executing program 6 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000400000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "00a491c996bc54b2feeec8a9000000008000", "56261dcf421246c7fa0f68f32aea17b14d6285984901f27cfcfc7d9f632ca88e"}}}}}}}, 0x0) 207.968876ms ago: executing program 0 (id=1040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 206.372196ms ago: executing program 2 (id=1041): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2050000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 175.06261ms ago: executing program 4 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r0, &(0x7f0000001240)=[{&(0x7f0000000300)="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", 0xfeac}], 0x1, 0x4, 0x0) 141.795344ms ago: executing program 6 (id=1043): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) renameat2(r1, &(0x7f00000001c0)='./bus/file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x0) 88.00926ms ago: executing program 0 (id=1044): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="04000000000303", 0x7}], 0x1) 0s ago: executing program 6 (id=1045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x23, 0x452, &(0x7f0000000880)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 6" with non-standard journal [ 171.403021][ T5538] REISERFS (device loop4): using ordered data mode [ 171.423875][ T5538] reiserfs: using flush barriers [ 171.452034][ T5544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'. [ 171.458104][ T5538] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.461521][ T5538] REISERFS (device loop4): checking transaction log (loop4) [ 171.559022][ T5534] REISERFS (device loop2): Using tea hash to sort names [ 171.560842][ T5534] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 171.563759][ T5534] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 171.749868][ T5534] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 171.755856][ T5544] loop0: detected capacity change from 0 to 8192 [ 172.447260][ T5544] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 172.464383][ T5544] REISERFS (device loop0): using ordered data mode [ 172.465731][ T5544] reiserfs: using flush barriers [ 172.476336][ T5538] REISERFS (device loop4): Using tea hash to sort names [ 172.490327][ T5538] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 172.493131][ T5538] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 172.506402][ T5544] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 172.523522][ T5544] REISERFS (device loop0): checking transaction log (loop0) [ 172.657431][ T5538] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 172.686613][ T5555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 172.710182][ T5555] loop3: detected capacity change from 0 to 128 [ 172.754169][ T5555] FAT-fs (loop3): bogus number of reserved sectors [ 172.755639][ T5555] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 172.757437][ T5555] FAT-fs (loop3): Can't find a valid FAT filesystem [ 172.822120][ T5544] REISERFS (device loop0): Using tea hash to sort names [ 172.823735][ T5544] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 172.826280][ T5544] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 172.897486][ T5544] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 172.985420][ T5565] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 173.060188][ T5570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.376'. [ 173.218057][ T26] audit: type=1400 audit(685.723:2): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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loop3: detected capacity change from 0 to 8192 [ 173.955961][ T5570] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 173.957969][ T5570] REISERFS (device loop3): using ordered data mode [ 173.959305][ T5570] reiserfs: using flush barriers [ 173.962627][ T5570] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.970206][ T5570] REISERFS (device loop3): checking transaction log (loop3) [ 174.221733][ T5570] REISERFS (device loop3): Using tea hash to sort names [ 174.223410][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 174.226721][ T5570] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 174.241209][ T5588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'. [ 174.241399][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 174.252253][ T5570] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 174.368474][ T5588] loop0: detected capacity change from 0 to 8192 [ 174.442636][ T5588] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 174.444405][ T5588] REISERFS (device loop0): using ordered data mode [ 174.447116][ T5588] reiserfs: using flush barriers [ 174.457626][ T5588] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.461021][ T5588] REISERFS (device loop0): checking transaction log (loop0) [ 174.741741][ T5588] REISERFS (device loop0): Using tea hash to sort names [ 174.743620][ T5588] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 174.756235][ T5588] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 174.882027][ T5588] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 175.736454][ T5611] loop2: detected capacity change from 0 to 512 [ 175.907180][ T5618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.386'. [ 175.995884][ T5618] loop0: detected capacity change from 0 to 8192 [ 176.012336][ T5606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.135892][ T5623] FAULT_INJECTION: forcing a failure. [ 176.135892][ T5623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.138565][ T5623] CPU: 1 PID: 5623 Comm: syz.4.391 Not tainted 5.15.169-syzkaller #0 [ 176.140261][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.142564][ T5623] Call trace: [ 176.143244][ T5623] dump_backtrace+0x0/0x530 [ 176.144190][ T5623] show_stack+0x2c/0x3c [ 176.145038][ T5623] dump_stack_lvl+0x108/0x170 [ 176.145964][ T5623] dump_stack+0x1c/0x58 [ 176.146854][ T5623] should_fail+0x3b8/0x514 [ 176.147732][ T5623] should_fail_usercopy+0x20/0x30 [ 176.148805][ T5623] _copy_from_iter+0x1f0/0xcf0 [ 176.149779][ T5623] netlink_sendmsg+0x70c/0xb38 [ 176.150774][ T5623] ____sys_sendmsg+0x584/0x870 [ 176.151813][ T5623] ___sys_sendmsg+0x214/0x294 [ 176.152731][ T5623] __arm64_sys_sendmsg+0x1ac/0x25c [ 176.153810][ T5623] invoke_syscall+0x98/0x2b8 [ 176.154801][ T5623] el0_svc_common+0x138/0x258 [ 176.155873][ T5623] do_el0_svc+0x58/0x14c [ 176.156668][ T5623] el0_svc+0x7c/0x1f0 [ 176.157504][ T5623] el0t_64_sync_handler+0x84/0xe4 [ 176.158537][ T5623] el0t_64_sync+0x1a0/0x1a4 [ 176.363602][ T5618] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 176.365390][ T5618] REISERFS (device loop0): using ordered data mode [ 176.366608][ T5618] reiserfs: using flush barriers [ 176.368601][ T5618] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.391537][ T5618] REISERFS (device loop0): checking transaction log (loop0) [ 177.575828][ T5652] loop4: detected capacity change from 0 to 128 [ 177.590959][ T5655] loop3: detected capacity change from 0 to 128 [ 177.675739][ T5652] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.689166][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.728574][ T5618] REISERFS (device loop0): Using tea hash to sort names [ 177.730198][ T5618] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 177.739273][ T5618] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 181.194753][ T5666] loop2: detected capacity change from 0 to 32768 [ 181.587290][ T5676] loop4: detected capacity change from 0 to 512 [ 181.660407][ T5676] EXT4-fs (loop4): 1 orphan inode deleted [ 181.661656][ T5676] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.720625][ T5682] loop0: detected capacity change from 0 to 512 [ 181.749342][ T5682] EXT4-fs (loop0): 1 orphan inode deleted [ 181.750701][ T5682] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 184.054060][ T5694] loop2: detected capacity change from 0 to 32768 [ 184.666726][ T5700] loop0: detected capacity change from 0 to 128 [ 184.729509][ T5700] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.859240][ T5721] loop0: detected capacity change from 0 to 512 [ 187.029288][ T5724] loop4: detected capacity change from 0 to 4096 [ 187.047894][ T5731] loop3: detected capacity change from 0 to 64 [ 187.058093][ T5721] EXT4-fs (loop0): 1 orphan inode deleted [ 187.059275][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.121281][ T5724] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 188.607660][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.415'. [ 188.774404][ T5747] loop4: detected capacity change from 0 to 128 [ 188.891399][ T5750] FAULT_INJECTION: forcing a failure. [ 188.891399][ T5750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.894172][ T5750] CPU: 1 PID: 5750 Comm: syz.2.422 Not tainted 5.15.169-syzkaller #0 [ 188.895869][ T5750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.897853][ T5750] Call trace: [ 188.898550][ T5750] dump_backtrace+0x0/0x530 [ 188.899456][ T5750] show_stack+0x2c/0x3c [ 188.900329][ T5750] dump_stack_lvl+0x108/0x170 [ 188.901342][ T5750] dump_stack+0x1c/0x58 [ 188.902206][ T5750] should_fail+0x3b8/0x514 [ 188.903112][ T5750] should_fail_usercopy+0x20/0x30 [ 188.904100][ T5750] __copy_msghdr_from_user+0xbc/0x5d0 [ 188.905145][ T5750] ___sys_sendmsg+0x154/0x294 [ 188.906127][ T5750] __arm64_sys_sendmsg+0x1ac/0x25c [ 188.907114][ T5750] invoke_syscall+0x98/0x2b8 [ 188.907641][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.907964][ T5750] el0_svc_common+0x138/0x258 [ 188.911112][ T5750] do_el0_svc+0x58/0x14c [ 188.912084][ T5750] el0_svc+0x7c/0x1f0 [ 188.912935][ T5750] el0t_64_sync_handler+0x84/0xe4 [ 188.913920][ T5750] el0t_64_sync+0x1a0/0x1a4 [ 189.584154][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.690965][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.794617][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.963702][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.478787][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 191.468690][ T5669] Bluetooth: hci3: command 0x0409 tx timeout [ 191.786985][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.798174][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.805685][ T5760] device bridge_slave_0 entered promiscuous mode [ 191.823772][ T5800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.429'. [ 191.871428][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.873040][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.875356][ T5760] device bridge_slave_1 entered promiscuous mode [ 191.958313][ T3604] Bluetooth: hci0: command 0x0409 tx timeout [ 192.009010][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.012877][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 192.062357][ T5800] loop0: detected capacity change from 0 to 8192 [ 192.081815][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.105169][ T5800] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 192.107099][ T5800] REISERFS (device loop0): using ordered data mode [ 192.138392][ T5800] reiserfs: using flush barriers [ 192.142762][ T5800] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.146376][ T5800] REISERFS (device loop0): checking transaction log (loop0) [ 192.152202][ T5791] loop2: detected capacity change from 0 to 40427 [ 192.227408][ T5791] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 192.229380][ T5791] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 192.299301][ T5791] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.345280][ T5760] team0: Port device team_slave_0 added [ 192.386674][ T5760] team0: Port device team_slave_1 added [ 192.390495][ T5791] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 192.392035][ T5791] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.401705][ T5800] REISERFS (device loop0): Using tea hash to sort names [ 192.403337][ T5800] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 192.406033][ T5800] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 192.510112][ T5791] netlink: 412 bytes leftover after parsing attributes in process `syz.2.428'. [ 192.524409][ T5800] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 192.537380][ T5800] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 192.539335][ T5800] overlayfs: missing 'lowerdir' [ 192.585832][ T26] audit: type=1326 audit(705.055:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5831 comm="syz.4.431" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2f2dfa8 code=0x0 [ 192.603000][ T5800] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 192.607875][ T5800] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 192.627532][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.633344][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.642808][ T5767] device bridge_slave_0 entered promiscuous mode [ 192.663803][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.665241][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.671852][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.675967][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.677375][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.683146][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.686217][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 192.699433][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.701017][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.704507][ T5767] device bridge_slave_1 entered promiscuous mode [ 192.916876][ T5839] loop0: detected capacity change from 0 to 128 [ 192.942407][ T5760] device hsr_slave_0 entered promiscuous mode [ 192.973277][ T5760] device hsr_slave_1 entered promiscuous mode [ 192.991473][ T5839] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.002838][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.004234][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.025790][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.027397][ T5760] Cannot create hsr debugfs directory [ 193.031304][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.203715][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.425131][ T5767] team0: Port device team_slave_0 added [ 193.539129][ T5767] team0: Port device team_slave_1 added [ 193.550118][ T3604] Bluetooth: hci3: command 0x041b tx timeout [ 193.584113][ T136] device hsr_slave_0 left promiscuous mode [ 193.620431][ T136] device hsr_slave_1 left promiscuous mode [ 193.714277][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.718664][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.722924][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.730005][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.750860][ T136] device bridge_slave_1 left promiscuous mode [ 193.764223][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.856765][ T136] device bridge_slave_0 left promiscuous mode [ 193.858156][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.030441][ T4032] Bluetooth: hci0: command 0x041b tx timeout [ 194.044263][ T5869] loop0: detected capacity change from 0 to 4096 [ 194.082272][ T136] device veth1_macvtap left promiscuous mode [ 194.083925][ T136] device veth0_macvtap left promiscuous mode [ 194.087064][ T136] device veth1_vlan left promiscuous mode [ 194.088665][ T136] device veth0_vlan left promiscuous mode [ 194.106516][ T5869] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 194.333733][ T5871] loop0: detected capacity change from 0 to 128 [ 194.365564][ T5871] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.819073][ T136] team0 (unregistering): Port device team_slave_1 removed [ 194.845307][ T136] team0 (unregistering): Port device team_slave_0 removed [ 194.872297][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.929333][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.045416][ T5876] loop2: detected capacity change from 0 to 32768 [ 195.163319][ T136] bond0 (unregistering): Released all slaves [ 195.357728][ T5879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.362252][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.366591][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.377349][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.398815][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.400356][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.425526][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.558892][ T5767] device hsr_slave_0 entered promiscuous mode [ 195.602322][ T5767] device hsr_slave_1 entered promiscuous mode [ 195.631762][ T4032] Bluetooth: hci3: command 0x040f tx timeout [ 195.641918][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.643547][ T5767] Cannot create hsr debugfs directory [ 195.649196][ T5760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 195.685744][ T5760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 195.751330][ T5760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 195.795302][ T5760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.046584][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.049649][ T5767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.085402][ T5767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.112054][ T3604] Bluetooth: hci0: command 0x040f tx timeout [ 196.142110][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.144285][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.172974][ T5767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.214755][ T5767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.246034][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.250210][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.260015][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.261968][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.263321][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.269153][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.289976][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.300365][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.302563][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.303928][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.316607][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.326918][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.345496][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.348801][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.380590][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.385827][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.388229][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.393256][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.395395][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.441603][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.443890][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.448384][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.558896][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.586488][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.588516][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 196.603419][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.618052][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.620519][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.623817][ T4223] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.625392][ T4223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.627459][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 196.644561][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 196.646850][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.648860][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.650373][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.652233][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 196.656900][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 196.659439][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.671051][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.697952][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.700115][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.703450][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.705661][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.707264][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.728172][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.729977][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.732079][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.743025][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.745654][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.750811][ T5767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.930311][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.932934][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.984973][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 196.987270][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 196.990577][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.993600][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.016714][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.018357][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.025354][ T5760] device veth0_vlan entered promiscuous mode [ 197.042091][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.047977][ T5760] device veth1_vlan entered promiscuous mode [ 197.097632][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.099774][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.101877][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 197.108362][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 197.128903][ T5760] device veth0_macvtap entered promiscuous mode [ 197.134176][ T5760] device veth1_macvtap entered promiscuous mode [ 197.171931][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.176608][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.178505][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.180527][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.182546][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.191892][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.194214][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.196206][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.199554][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.202540][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 197.205554][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.207634][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.209787][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.216356][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.218494][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.220447][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.222372][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.241079][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.244132][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.246114][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.248205][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.261224][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.271414][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.276780][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.300744][ T5760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.302494][ T5760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.325685][ T5760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.327536][ T5760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.489724][ T5019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.491553][ T5019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.509152][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.575820][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.578247][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 197.654968][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.656671][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.663760][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 197.665896][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 197.668019][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 197.670192][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 197.672324][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 197.689131][ T5767] device veth0_vlan entered promiscuous mode [ 197.713295][ T4032] Bluetooth: hci3: command 0x0419 tx timeout [ 197.876036][ T5767] device veth1_vlan entered promiscuous mode [ 197.986949][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 197.988989][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 197.995630][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 198.001360][ T4135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 198.020044][ T5767] device veth0_macvtap entered promiscuous mode [ 198.084482][ T5767] device veth1_macvtap entered promiscuous mode [ 198.126610][ T5983] loop5: detected capacity change from 0 to 64 [ 198.190721][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.192829][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.193618][ T3604] Bluetooth: hci0: command 0x0419 tx timeout [ 198.212754][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.225614][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.227736][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.229832][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.231843][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.238898][ T5985] loop4: detected capacity change from 0 to 16 [ 198.259531][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.261716][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.266982][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.274675][ T5983] hfs: unable to parse mount options [ 198.281375][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.319336][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.321395][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.337011][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.339047][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.340976][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.342956][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.345843][ T5985] erofs: Unknown parameter 'ÂÑ2'_å4ZŒ“½ñAŒè' [ 198.408942][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.411087][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.413138][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.433483][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.440787][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.445840][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 198.448078][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 198.454662][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 198.460436][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 198.480865][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 198.517892][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 198.532873][ T5984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.665902][ T5995] loop0: detected capacity change from 0 to 128 [ 198.704884][ T5767] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.706971][ T5767] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.708660][ T5767] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.710366][ T5767] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.841984][ T5999] loop5: detected capacity change from 0 to 256 [ 198.959250][ T5999] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 199.304118][ T5995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 199.452143][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.454082][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.504792][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 199.602005][ T4115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.604004][ T4115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.613727][ T4115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 199.931256][ T6020] binder: 6019:6020 got transaction to invalid handle, 3 [ 199.933114][ T6020] binder: 6019:6020 transaction failed 29201/-22, size 0-0 line 2917 [ 199.964321][ T6020] binder: 6019:6020 ioctl c0306201 20000380 returned -14 [ 199.970555][ T5952] loop2: detected capacity change from 0 to 65536 [ 200.091906][ T6027] loop6: detected capacity change from 0 to 512 [ 200.121727][ T5952] XFS (loop2): Mounting V5 Filesystem [ 200.247959][ T6027] EXT4-fs (loop6): 1 orphan inode deleted [ 200.249168][ T6027] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.305604][ T5952] XFS (loop2): Ending clean mount [ 200.384226][ T4027] XFS (loop2): Unmounting Filesystem [ 200.556300][ T6039] loop5: detected capacity change from 0 to 512 [ 200.679397][ T6039] EXT4-fs (loop5): 1 orphan inode deleted [ 200.680574][ T6039] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.873124][ T6046] loop6: detected capacity change from 0 to 2048 [ 200.884722][ T6010] loop4: detected capacity change from 0 to 32768 [ 200.996846][ T6046] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 201.000046][ T6010] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.454 (6010) [ 201.826994][ T6046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.008491][ T6010] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 202.010531][ T6010] BTRFS info (device loop4): disabling tree log [ 202.011716][ T6010] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 202.013711][ T6010] BTRFS info (device loop4): trying to use backup root at mount time [ 202.015236][ T6010] BTRFS info (device loop4): setting nodatacow, compression disabled [ 202.100830][ T6010] BTRFS info (device loop4): enabling ssd optimizations [ 202.102272][ T6010] BTRFS info (device loop4): using spread ssd allocation scheme [ 202.103759][ T6010] BTRFS info (device loop4): using free space tree [ 202.105062][ T6010] BTRFS info (device loop4): has skinny extents [ 202.637656][ T6085] loop5: detected capacity change from 0 to 64 [ 203.233305][ T6085] hfs: unable to parse mount options [ 203.853393][ T6099] loop5: detected capacity change from 0 to 256 [ 204.495470][ T6099] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 204.528212][ T6010] BTRFS error (device loop4): open_ctree failed [ 204.598528][ T6105] loop0: detected capacity change from 0 to 64 [ 204.637944][ T6105] hfs: unable to parse mount options [ 204.643653][ T6107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'. [ 204.804088][ T6112] loop5: detected capacity change from 0 to 512 [ 204.824735][ T6107] loop2: detected capacity change from 0 to 8192 [ 204.930695][ T6107] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 204.933546][ T6107] REISERFS (device loop2): using ordered data mode [ 204.934835][ T6107] reiserfs: using flush barriers [ 204.936743][ T6107] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.948371][ T6107] REISERFS (device loop2): checking transaction log (loop2) [ 205.135012][ T6121] loop0: detected capacity change from 0 to 256 [ 205.826358][ T6121] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 205.831363][ T6119] loop4: detected capacity change from 0 to 2048 [ 205.863696][ T6112] EXT4-fs (loop5): 1 orphan inode deleted [ 205.865331][ T6112] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 206.143320][ T6126] FAULT_INJECTION: forcing a failure. [ 206.143320][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 206.145863][ T6126] CPU: 0 PID: 6126 Comm: syz.5.470 Not tainted 5.15.169-syzkaller #0 [ 206.147422][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 206.149482][ T6126] Call trace: [ 206.150230][ T6126] dump_backtrace+0x0/0x530 [ 206.151171][ T6126] show_stack+0x2c/0x3c [ 206.151988][ T6126] dump_stack_lvl+0x108/0x170 [ 206.153006][ T6126] dump_stack+0x1c/0x58 [ 206.153876][ T6126] should_fail+0x3b8/0x514 [ 206.154799][ T6126] __should_failslab+0xbc/0x110 [ 206.155923][ T6126] should_failslab+0x10/0x28 [ 206.156902][ T6126] slab_pre_alloc_hook+0x64/0xe8 [ 206.157846][ T6126] __kmalloc_track_caller+0x78/0x3d8 [ 206.158833][ T6126] memdup_user+0xd0/0x2c8 [ 206.159835][ T6126] strndup_user+0x78/0xe0 [ 206.160666][ T6126] __arm64_sys_fsopen+0xe0/0x318 [ 206.161667][ T6126] invoke_syscall+0x98/0x2b8 [ 206.162610][ T6126] el0_svc_common+0x138/0x258 [ 206.163649][ T6126] do_el0_svc+0x58/0x14c [ 206.164520][ T6126] el0_svc+0x7c/0x1f0 [ 206.165357][ T6126] el0t_64_sync_handler+0x84/0xe4 [ 206.166420][ T6126] el0t_64_sync+0x1a0/0x1a4 [ 206.462419][ T6107] REISERFS (device loop2): Using tea hash to sort names [ 206.463966][ T6107] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 206.490006][ T6124] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.504631][ T6107] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 206.522256][ T6119] NILFS (loop4): error -2 truncating bmap (ino=16) [ 206.615432][ T6107] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 206.948261][ T6145] loop4: detected capacity change from 0 to 128 [ 207.114068][ T6145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.371483][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.2.475'. [ 207.484644][ T6162] netlink: 'syz.0.478': attribute type 7 has an invalid length. [ 207.851039][ T6175] netlink: 'syz.0.484': attribute type 21 has an invalid length. [ 207.852786][ T6175] netlink: 160 bytes leftover after parsing attributes in process `syz.0.484'. [ 207.887450][ T6178] netlink: 'syz.0.484': attribute type 21 has an invalid length. [ 207.909208][ T6178] netlink: 160 bytes leftover after parsing attributes in process `syz.0.484'. [ 207.914073][ T6177] FAULT_INJECTION: forcing a failure. [ 207.914073][ T6177] name failslab, interval 1, probability 0, space 0, times 0 [ 207.916565][ T6177] CPU: 1 PID: 6177 Comm: syz.2.485 Not tainted 5.15.169-syzkaller #0 [ 207.918160][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.920129][ T6177] Call trace: [ 207.920809][ T6177] dump_backtrace+0x0/0x530 [ 207.921710][ T6177] show_stack+0x2c/0x3c [ 207.922511][ T6177] dump_stack_lvl+0x108/0x170 [ 207.923446][ T6177] dump_stack+0x1c/0x58 [ 207.924274][ T6177] should_fail+0x3b8/0x514 [ 207.925104][ T6177] __should_failslab+0xbc/0x110 [ 207.926074][ T6177] should_failslab+0x10/0x28 [ 207.926918][ T6177] slab_pre_alloc_hook+0x64/0xe8 [ 207.927963][ T6177] __kmalloc_node+0xbc/0x5b8 [ 207.928913][ T6177] __vmalloc_node_range+0x2d0/0x8e4 [ 207.929959][ T6177] __vmalloc+0x130/0x1a8 [ 207.930794][ T6177] bpf_prog_alloc_no_stats+0x50/0x2bc [ 207.931929][ T6177] bpf_prog_alloc+0x34/0x200 [ 207.932807][ T6177] bpf_prog_load+0x6b0/0x15c8 [ 207.933839][ T6177] __sys_bpf+0x2e8/0x610 [ 207.934726][ T6177] __arm64_sys_bpf+0x80/0x98 [ 207.935665][ T6177] invoke_syscall+0x98/0x2b8 [ 207.936625][ T6177] el0_svc_common+0x138/0x258 [ 207.937586][ T6177] do_el0_svc+0x58/0x14c [ 207.938380][ T6177] el0_svc+0x7c/0x1f0 [ 207.939164][ T6177] el0t_64_sync_handler+0x84/0xe4 [ 207.940324][ T6177] el0t_64_sync+0x1a0/0x1a4 [ 208.019128][ T6184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.114506][ T6193] loop0: detected capacity change from 0 to 512 [ 208.302883][ T6193] EXT4-fs (loop0): 1 orphan inode deleted [ 208.304189][ T6193] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.136291][ T6215] loop6: detected capacity change from 0 to 8192 [ 209.185889][ T6215] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 209.188151][ T6215] REISERFS (device loop6): using ordered data mode [ 209.189934][ T6215] reiserfs: using flush barriers [ 209.199209][ T6215] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.202408][ T6215] REISERFS (device loop6): checking transaction log (loop6) [ 209.344883][ T4435] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.396585][ T6215] REISERFS (device loop6): Using tea hash to sort names [ 209.398340][ T6215] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 209.406722][ T6215] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 209.437249][ T4435] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.492799][ T6233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.584116][ T4435] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.605074][ T6236] loop2: detected capacity change from 0 to 8192 [ 209.682174][ T6220] loop4: detected capacity change from 0 to 32768 [ 209.688346][ T4435] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.699296][ T6236] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 209.701137][ T6236] REISERFS (device loop2): using ordered data mode [ 209.702389][ T6236] reiserfs: using flush barriers [ 209.703033][ T6244] loop6: detected capacity change from 0 to 128 [ 209.713486][ T6236] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.723716][ T6236] REISERFS (device loop2): checking transaction log (loop2) [ 209.734314][ T6236] REISERFS warning: reiserfs-5081 is_leaf: nr_item seems wrong: level=1, nr_items=1538, free_space=0 rdkey [ 209.736465][ T6236] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 209.762230][ T6236] REISERFS (device loop2): Remounting filesystem read-only [ 209.763794][ T6236] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 209.769351][ T6236] REISERFS warning (device loop2): reiserfs_fill_super: corrupt root inode, run fsck [ 209.818162][ T6244] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.826577][ T6220] XFS (loop4): Mounting V5 Filesystem [ 210.110147][ T6220] XFS (loop4): Ending clean mount [ 210.324286][ T6268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.501'. [ 210.548492][ T4023] XFS (loop4): Unmounting Filesystem [ 210.707367][ T6268] loop2: detected capacity change from 0 to 8192 [ 210.726900][ T6241] loop0: detected capacity change from 0 to 40427 [ 210.751591][ T6268] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 210.753469][ T6268] REISERFS (device loop2): using ordered data mode [ 210.754705][ T6268] reiserfs: using flush barriers [ 210.771812][ T6241] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 210.773354][ T6241] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 210.788063][ T6268] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.809822][ T6268] REISERFS (device loop2): checking transaction log (loop2) [ 210.819645][ T6241] F2FS-fs (loop0): invalid crc value [ 210.981202][ T6241] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.128525][ T6241] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 211.130248][ T6241] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.133113][ T6241] FAULT_INJECTION: forcing a failure. [ 211.133113][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 211.143658][ T6241] CPU: 1 PID: 6241 Comm: syz.0.498 Not tainted 5.15.169-syzkaller #0 [ 211.145391][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.147353][ T6241] Call trace: [ 211.148039][ T6241] dump_backtrace+0x0/0x530 [ 211.149014][ T6241] show_stack+0x2c/0x3c [ 211.149846][ T6241] dump_stack_lvl+0x108/0x170 [ 211.150732][ T6241] dump_stack+0x1c/0x58 [ 211.151636][ T6241] should_fail+0x3b8/0x514 [ 211.152586][ T6241] __should_failslab+0xbc/0x110 [ 211.153552][ T6241] should_failslab+0x10/0x28 [ 211.154438][ T6241] slab_pre_alloc_hook+0x64/0xe8 [ 211.155417][ T6241] kmem_cache_alloc+0x98/0x45c [ 211.156363][ T6241] __d_alloc+0x3c/0x6a8 [ 211.157267][ T6241] d_alloc_parallel+0xb8/0x11bc [ 211.158238][ T6241] path_openat+0x73c/0x26cc [ 211.159078][ T6241] do_filp_open+0x1a8/0x3b4 [ 211.160012][ T6241] do_sys_openat2+0x128/0x3e0 [ 211.161002][ T6241] __arm64_sys_openat+0x1f0/0x240 [ 211.162047][ T6241] invoke_syscall+0x98/0x2b8 [ 211.163103][ T6241] el0_svc_common+0x138/0x258 [ 211.164118][ T6241] do_el0_svc+0x58/0x14c [ 211.165113][ T6241] el0_svc+0x7c/0x1f0 [ 211.165912][ T6241] el0t_64_sync_handler+0x84/0xe4 [ 211.166906][ T6241] el0t_64_sync+0x1a0/0x1a4 [ 211.179017][ T6268] REISERFS (device loop2): Using tea hash to sort names [ 211.191773][ T6268] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 211.215949][ T6268] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 212.095289][ T6303] loop6: detected capacity change from 0 to 8192 [ 212.147189][ T6303] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 212.149328][ T6303] REISERFS (device loop6): using ordered data mode [ 212.150961][ T6303] reiserfs: using flush barriers [ 212.153645][ T6303] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.158209][ T6303] REISERFS (device loop6): checking transaction log (loop6) [ 212.314505][ T6323] loop2: detected capacity change from 0 to 64 [ 212.328980][ T6323] hfs: unable to parse mount options [ 212.417801][ T6303] REISERFS (device loop6): Using tea hash to sort names [ 212.419410][ T6303] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 212.447665][ T6303] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 213.066834][ T6335] loop5: detected capacity change from 0 to 4096 [ 213.135834][ T6343] loop2: detected capacity change from 0 to 128 [ 213.162549][ T6335] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 213.439370][ T6353] netlink: 32 bytes leftover after parsing attributes in process `syz.6.518'. [ 213.679009][ T4435] device hsr_slave_0 left promiscuous mode [ 213.696883][ T6353] loop6: detected capacity change from 0 to 8192 [ 213.735342][ T4435] device hsr_slave_1 left promiscuous mode [ 213.805608][ T6353] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 213.807721][ T6353] REISERFS (device loop6): using ordered data mode [ 213.809176][ T6353] reiserfs: using flush barriers [ 213.812158][ T6353] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 213.821265][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.822995][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.828567][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.831881][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.848254][ T6353] REISERFS (device loop6): checking transaction log (loop6) [ 213.864075][ T4435] device bridge_slave_1 left promiscuous mode [ 213.865727][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.952346][ T4435] device bridge_slave_0 left promiscuous mode [ 213.953880][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.129163][ T6298] loop4: detected capacity change from 0 to 65536 [ 214.150887][ T4435] device veth1_macvtap left promiscuous mode [ 214.159855][ T4435] device veth0_macvtap left promiscuous mode [ 214.161879][ T4435] device veth1_vlan left promiscuous mode [ 214.164331][ T4435] device veth0_vlan left promiscuous mode [ 214.243059][ T6353] REISERFS (device loop6): Using tea hash to sort names [ 214.244812][ T6353] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 214.247634][ T6353] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 214.331294][ T6298] XFS (loop4): Mounting V5 Filesystem [ 214.445878][ T6381] loop0: detected capacity change from 0 to 8192 [ 214.464292][ T6298] XFS (loop4): Ending clean mount [ 214.490049][ T4023] XFS (loop4): Unmounting Filesystem [ 214.543402][ T6381] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 214.545236][ T6381] REISERFS (device loop0): using ordered data mode [ 214.546484][ T6381] reiserfs: using flush barriers [ 214.549145][ T6381] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 214.576333][ T6381] REISERFS (device loop0): checking transaction log (loop0) [ 214.734982][ T6381] REISERFS (device loop0): Using tea hash to sort names [ 214.736656][ T6381] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 214.739558][ T6381] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 214.878816][ T6375] loop2: detected capacity change from 0 to 32768 [ 215.021470][ T6375] XFS (loop2): Mounting V5 Filesystem [ 215.043176][ T4435] team0 (unregistering): Port device team_slave_1 removed [ 215.076020][ T4435] team0 (unregistering): Port device team_slave_0 removed [ 215.103740][ T6375] XFS (loop2): Ending clean mount [ 215.105865][ T4435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.145180][ T7] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 215.147581][ T7] XFS (loop2): Unmount and run xfs_repair [ 215.148886][ T7] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 215.150321][ T7] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 215.171141][ T7] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 215.177311][ T7] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 215.180315][ T7] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 215.188508][ T7] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 215.192742][ T7] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.197110][ T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.200159][ T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 215.204881][ T6375] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 215.206700][ T4435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.213853][ T6375] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 215.217136][ T6375] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 215.220740][ T6413] FAULT_INJECTION: forcing a failure. [ 215.220740][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 215.223401][ T6413] CPU: 1 PID: 6413 Comm: syz.2.522 Not tainted 5.15.169-syzkaller #0 [ 215.225035][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.226993][ T6413] Call trace: [ 215.227659][ T6413] dump_backtrace+0x0/0x530 [ 215.228627][ T6413] show_stack+0x2c/0x3c [ 215.229546][ T6413] dump_stack_lvl+0x108/0x170 [ 215.230516][ T6413] dump_stack+0x1c/0x58 [ 215.231385][ T6413] should_fail+0x3b8/0x514 [ 215.232295][ T6413] __should_failslab+0xbc/0x110 [ 215.233295][ T6413] should_failslab+0x10/0x28 [ 215.234229][ T6413] slab_pre_alloc_hook+0x64/0xe8 [ 215.235306][ T6413] kmem_cache_alloc+0x98/0x45c [ 215.236291][ T6413] __sigqueue_alloc+0x3d8/0x4d8 [ 215.237277][ T6413] __send_signal+0x1c8/0xb3c [ 215.238266][ T6413] send_signal+0xb0/0x864 [ 215.239116][ T6413] force_sig_info_to_task+0x298/0x40c [ 215.240200][ T6413] force_sig_fault+0x100/0x1a0 [ 215.241143][ T6413] arm64_force_sig_fault+0x6c/0x80 [ 215.242297][ T6413] do_page_fault+0xa58/0xb60 [ 215.243196][ T6413] do_translation_fault+0xe8/0x138 [ 215.244229][ T6413] do_mem_abort+0x70/0x1d8 [ 215.245007][ T6413] el0_da+0x94/0x20c [ 215.245800][ T6413] el0t_64_sync_handler+0xc0/0xe4 [ 215.246857][ T6413] el0t_64_sync+0x1a0/0x1a4 [ 215.302632][ T4027] XFS (loop2): Unmounting Filesystem [ 215.467245][ T4435] bond0 (unregistering): Released all slaves [ 215.577802][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.526'. [ 215.598533][ T6415] loop4: detected capacity change from 0 to 32768 [ 215.663337][ T6424] FAULT_INJECTION: forcing a failure. [ 215.663337][ T6424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.666049][ T6424] CPU: 0 PID: 6424 Comm: syz.0.529 Not tainted 5.15.169-syzkaller #0 [ 215.667761][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.669693][ T6424] Call trace: [ 215.670300][ T6424] dump_backtrace+0x0/0x530 [ 215.671245][ T6424] show_stack+0x2c/0x3c [ 215.672087][ T6424] dump_stack_lvl+0x108/0x170 [ 215.673033][ T6424] dump_stack+0x1c/0x58 [ 215.673771][ T6424] should_fail+0x3b8/0x514 [ 215.674689][ T6424] should_fail_usercopy+0x20/0x30 [ 215.675644][ T6424] copy_page_from_iter+0x2fc/0x760 [ 215.676665][ T6424] tun_get_user+0x177c/0x3774 [ 215.677615][ T6424] tun_chr_write_iter+0xfc/0x20c [ 215.678669][ T6424] vfs_write+0x884/0xb44 [ 215.679540][ T6424] ksys_write+0x15c/0x26c [ 215.680401][ T6424] __arm64_sys_write+0x7c/0x90 [ 215.681471][ T6424] invoke_syscall+0x98/0x2b8 [ 215.682426][ T6424] el0_svc_common+0x138/0x258 [ 215.683451][ T6424] do_el0_svc+0x58/0x14c [ 215.684241][ T6424] el0_svc+0x7c/0x1f0 [ 215.685128][ T6424] el0t_64_sync_handler+0x84/0xe4 [ 215.686089][ T6424] el0t_64_sync+0x1a0/0x1a4 [ 215.714261][ T6429] loop2: detected capacity change from 0 to 256 [ 215.779879][ T6429] vivid-000: disconnect [ 215.786376][ T6429] vivid-000: reconnect [ 215.801886][ T6427] loop5: detected capacity change from 0 to 4096 [ 215.816590][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.527'. [ 215.846506][ T6427] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 215.870335][ T6415] XFS (loop4): Mounting V5 Filesystem [ 215.898379][ T6440] loop6: detected capacity change from 0 to 64 [ 215.939107][ T6415] XFS (loop4): Ending clean mount [ 215.987802][ T4071] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 215.990318][ T4071] XFS (loop4): Unmount and run xfs_repair [ 215.993771][ T4071] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 215.995301][ T4071] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 215.997092][ T4071] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 215.998879][ T4071] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 216.000617][ T4071] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 216.036995][ T4071] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 216.047903][ T4071] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.058879][ T4071] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.065162][ T4071] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 216.073880][ T6415] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 216.085663][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.6.532'. [ 216.099790][ T6415] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 216.103361][ T6415] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 216.167767][ T4023] XFS (loop4): Unmounting Filesystem [ 216.169627][ T6429] loop2: detected capacity change from 0 to 32768 [ 216.257935][ T6429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.527 (6429) [ 216.281195][ T25] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 216.386687][ T6429] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 216.388561][ T6429] BTRFS info (device loop2): turning off barriers [ 216.390040][ T6429] BTRFS info (device loop2): setting nodatasum [ 216.392936][ T6429] BTRFS info (device loop2): enabling auto defrag [ 216.394548][ T6429] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 216.396910][ T6429] BTRFS info (device loop2): use lzo compression, level 0 [ 216.398526][ T6429] BTRFS info (device loop2): using free space tree [ 216.399781][ T6429] BTRFS info (device loop2): has skinny extents [ 217.200820][ T6461] netlink: 32 bytes leftover after parsing attributes in process `syz.5.535'. [ 217.241410][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 217.396163][ T25] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 217.594639][ T6472] loop5: detected capacity change from 0 to 8192 [ 217.622693][ T6429] BTRFS info (device loop2): enabling ssd optimizations [ 217.641377][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 217.645983][ T25] usb usb1-port1: attempt power cycle [ 217.709412][ T6429] netlink: 25 bytes leftover after parsing attributes in process `syz.2.527'. [ 217.732823][ T6472] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 217.734741][ T6472] REISERFS (device loop5): using ordered data mode [ 217.736110][ T6472] reiserfs: using flush barriers [ 217.738021][ T6472] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 217.752789][ T6472] REISERFS (device loop5): checking transaction log (loop5) [ 218.101260][ T25] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 218.190527][ T6472] REISERFS (device loop5): Using tea hash to sort names [ 218.201453][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 218.207790][ T6472] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 218.210528][ T6472] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 218.264197][ T6521] netlink: 32 bytes leftover after parsing attributes in process `syz.2.539'. [ 218.315422][ T6523] loop4: detected capacity change from 0 to 128 [ 218.381546][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 218.423579][ T6523] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.501448][ T25] usb 1-1: Invalid ep0 maxpacket: 64 [ 218.502729][ T25] usb usb1-port1: unable to enumerate USB device [ 220.224446][ T6556] loop6: detected capacity change from 0 to 128 [ 220.241237][ T6534] loop5: detected capacity change from 0 to 4096 [ 220.581122][ T6534] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 220.636833][ T6568] raw_sendmsg: syz.2.549 forgot to set AF_INET. Fix it! [ 220.874816][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.4.550'. [ 220.876889][ T6574] netlink: 52 bytes leftover after parsing attributes in process `syz.4.550'. [ 220.879880][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 220.980551][ T6556] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.247855][ T6591] netlink: 32 bytes leftover after parsing attributes in process `syz.5.553'. [ 221.505953][ T6609] loop5: detected capacity change from 0 to 64 [ 221.534123][ T6609] hfs: unable to parse mount options [ 221.696496][ T6592] loop4: detected capacity change from 0 to 8192 [ 221.762952][ T6615] loop2: detected capacity change from 0 to 32768 [ 222.490849][ T6592] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 222.494024][ T6592] REISERFS (device loop4): using ordered data mode [ 222.513902][ T6592] reiserfs: using flush barriers [ 222.526700][ T6615] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 222.531484][ T6592] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 222.571361][ T6615] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 222.575475][ T6615] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 222.577437][ T6615] OCFS2: File system is now read-only. [ 222.578269][ T6592] REISERFS (device loop4): checking transaction log (loop4) [ 222.578498][ T6615] (syz.2.562,6615,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 222.581585][ T6615] (syz.2.562,6615,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 222.583045][ T6615] (syz.2.562,6615,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 222.584621][ T6615] (syz.2.562,6615,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 222.586282][ T6615] (syz.2.562,6615,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 222.587807][ T6615] (syz.2.562,6615,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 222.589318][ T6615] (syz.2.562,6615,0):ocfs2_mknod_locked:637 ERROR: status = -30 [ 222.590809][ T6615] (syz.2.562,6615,0):ocfs2_mknod:383 ERROR: status = -30 [ 222.593108][ T6615] (syz.2.562,6615,0):ocfs2_mknod:500 ERROR: status = -30 [ 222.594597][ T6615] (syz.2.562,6615,0):ocfs2_mkdir:657 ERROR: status = -30 [ 222.646189][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.563'. [ 222.690081][ T6592] REISERFS (device loop4): Using tea hash to sort names [ 222.691711][ T6592] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 222.735773][ T6592] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 222.793162][ T4027] (syz-executor,4027,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 66 [ 222.798068][ T4027] ocfs2: Unmounting device (7,2) on (node local) [ 222.830699][ T6629] loop6: detected capacity change from 0 to 64 [ 222.839813][ T6629] hfs: invalid gid -1 [ 222.840672][ T6629] hfs: unable to parse mount options [ 222.937470][ T6631] loop5: detected capacity change from 0 to 256 [ 223.607043][ T6633] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 223.611586][ T6633] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 223.649286][ T6631] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 223.758947][ T6636] loop2: detected capacity change from 0 to 4096 [ 223.914378][ T6636] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 223.967727][ T6643] loop5: detected capacity change from 0 to 128 [ 224.003693][ T6638] loop6: detected capacity change from 0 to 8192 [ 224.040483][ T6643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.054231][ T6648] loop4: detected capacity change from 0 to 256 [ 224.063121][ T6638] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 224.064987][ T6638] REISERFS (device loop6): using ordered data mode [ 224.066356][ T6638] reiserfs: using flush barriers [ 224.072382][ T6638] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.075689][ T6638] REISERFS (device loop6): checking transaction log (loop6) [ 224.108687][ T6603] loop0: detected capacity change from 0 to 32768 [ 224.212900][ T6603] XFS: ikeep mount option is deprecated. [ 224.534574][ T6669] input: syz1 as /devices/virtual/input/input2 [ 224.618124][ T6638] REISERFS (device loop6): Using tea hash to sort names [ 224.619801][ T6638] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 224.623086][ T6638] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 225.010095][ T6696] loop2: detected capacity change from 0 to 128 [ 225.057087][ T6700] loop0: detected capacity change from 0 to 64 [ 225.133015][ T6700] hfs: unable to parse mount options [ 225.187708][ T6696] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.007608][ T6710] loop0: detected capacity change from 0 to 256 [ 227.746882][ T6702] loop4: detected capacity change from 0 to 8192 [ 227.945672][ T6710] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 227.971511][ T6702] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 227.974573][ T6702] REISERFS (device loop4): using ordered data mode [ 227.975895][ T6702] reiserfs: using flush barriers [ 227.977760][ T6702] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 227.981381][ T6702] REISERFS (device loop4): checking transaction log (loop4) [ 228.101425][ T6721] loop2: detected capacity change from 0 to 4096 [ 229.005292][ T6721] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 229.378704][ T6740] sctp: [Deprecated]: syz.5.582 (pid 6740) Use of int in max_burst socket option deprecated. [ 229.378704][ T6740] Use struct sctp_assoc_value instead [ 229.753473][ T6702] REISERFS (device loop4): Using tea hash to sort names [ 230.013476][ T6702] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 230.026148][ T6702] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 231.203962][ T6743] loop2: detected capacity change from 0 to 8192 [ 231.269081][ T6764] loop0: detected capacity change from 0 to 512 [ 231.271609][ T6743] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 231.277589][ T6743] REISERFS (device loop2): using ordered data mode [ 231.278995][ T6743] reiserfs: using flush barriers [ 231.330617][ T6766] netlink: 32 bytes leftover after parsing attributes in process `syz.6.595'. [ 231.347154][ T6743] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.350924][ T6743] REISERFS (device loop2): checking transaction log (loop2) [ 231.362461][ T6768] loop5: detected capacity change from 0 to 64 [ 231.393576][ T6768] hfs: unable to parse mount options [ 231.561225][ T6764] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 231.709244][ T6784] loop5: detected capacity change from 0 to 256 [ 231.916246][ T6784] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 232.139046][ T6786] EXT4-fs (loop0): shut down requested (2) [ 232.241133][ T6766] loop6: detected capacity change from 0 to 8192 [ 232.264184][ T6743] REISERFS (device loop2): Using tea hash to sort names [ 232.276517][ T6743] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 232.279497][ T6743] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 232.293952][ T6766] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 232.295789][ T6766] REISERFS (device loop6): using ordered data mode [ 232.297061][ T6766] reiserfs: using flush barriers [ 232.323522][ T6766] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.398987][ T6766] REISERFS (device loop6): checking transaction log (loop6) [ 232.413400][ T6795] FAULT_INJECTION: forcing a failure. [ 232.413400][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.416320][ T6795] CPU: 1 PID: 6795 Comm: syz.5.596 Not tainted 5.15.169-syzkaller #0 [ 232.417934][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.420063][ T6795] Call trace: [ 232.420679][ T6795] dump_backtrace+0x0/0x530 [ 232.421633][ T6795] show_stack+0x2c/0x3c [ 232.422491][ T6795] dump_stack_lvl+0x108/0x170 [ 232.423497][ T6795] dump_stack+0x1c/0x58 [ 232.424343][ T6795] should_fail+0x3b8/0x514 [ 232.425292][ T6795] should_fail_usercopy+0x20/0x30 [ 232.426253][ T6795] btf_new_fd+0x220/0xb00 [ 232.427101][ T6795] bpf_btf_load+0x78/0x98 [ 232.427947][ T6795] __sys_bpf+0x410/0x610 [ 232.428847][ T6795] __arm64_sys_bpf+0x80/0x98 [ 232.429823][ T6795] invoke_syscall+0x98/0x2b8 [ 232.430785][ T6795] el0_svc_common+0x138/0x258 [ 232.431788][ T6795] do_el0_svc+0x58/0x14c [ 232.432680][ T6795] el0_svc+0x7c/0x1f0 [ 232.433499][ T6795] el0t_64_sync_handler+0x84/0xe4 [ 232.434483][ T6795] el0t_64_sync+0x1a0/0x1a4 [ 232.615769][ T6777] loop4: detected capacity change from 0 to 32768 [ 233.411997][ T6766] REISERFS (device loop6): Using tea hash to sort names [ 233.414763][ T6766] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 233.449127][ T6766] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 233.491357][ T6777] XFS (loop4): Mounting V5 Filesystem [ 233.566941][ T6766] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 233.580572][ T6766] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 233.587168][ T6766] overlayfs: missing 'lowerdir' [ 233.593953][ T6777] XFS (loop4): Ending clean mount [ 233.635627][ T6819] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 233.640362][ T6777] input: syz1 as /devices/virtual/input/input3 [ 233.668501][ T6777] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 233.670903][ T6777] XFS (loop4): Unmount and run xfs_repair [ 233.672195][ T6777] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 233.692863][ T6777] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 233.720688][ T6777] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 233.731095][ T6777] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 233.732863][ T6777] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 233.735296][ T6777] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 233.737257][ T6777] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.742317][ T6777] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.754031][ T6777] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 233.758171][ T6777] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 233.777325][ T6777] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 233.789141][ T6777] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 234.056982][ T6829] sctp: [Deprecated]: syz.0.601 (pid 6829) Use of int in max_burst socket option deprecated. [ 234.056982][ T6829] Use struct sctp_assoc_value instead [ 234.716139][ T6828] loop2: detected capacity change from 0 to 8192 [ 234.783491][ T4023] XFS (loop4): Unmounting Filesystem [ 234.827565][ T6828] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 234.829441][ T6828] REISERFS (device loop2): using ordered data mode [ 234.830681][ T6828] reiserfs: using flush barriers [ 234.838520][ T6828] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 234.841891][ T6828] REISERFS (device loop2): checking transaction log (loop2) [ 234.992506][ T6828] REISERFS (device loop2): Using tea hash to sort names [ 234.994425][ T6828] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 234.997294][ T6828] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 235.004862][ T6844] loop5: detected capacity change from 0 to 64 [ 235.036963][ T6844] hfs: unable to parse mount options [ 235.407868][ T6850] loop5: detected capacity change from 0 to 256 [ 236.086450][ T6850] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 236.386422][ T6853] FAULT_INJECTION: forcing a failure. [ 236.386422][ T6853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.389448][ T6853] CPU: 1 PID: 6853 Comm: syz.2.607 Not tainted 5.15.169-syzkaller #0 [ 236.391035][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.393243][ T6853] Call trace: [ 236.393964][ T6853] dump_backtrace+0x0/0x530 [ 236.394938][ T6853] show_stack+0x2c/0x3c [ 236.395825][ T6853] dump_stack_lvl+0x108/0x170 [ 236.396771][ T6853] dump_stack+0x1c/0x58 [ 236.397693][ T6853] should_fail+0x3b8/0x514 [ 236.398611][ T6853] should_fail_alloc_page+0x74/0xa8 [ 236.399628][ T6853] prepare_alloc_pages+0x160/0x460 [ 236.400769][ T6853] __alloc_pages+0x138/0x674 [ 236.401808][ T6853] alloc_pages+0x368/0x5d4 [ 236.402674][ T6853] __get_free_pages+0x18/0x84 [ 236.403683][ T6853] kasan_populate_vmalloc_pte+0x44/0xe0 [ 236.404770][ T6853] __apply_to_page_range+0x864/0xbb4 [ 236.405938][ T6853] apply_to_page_range+0x4c/0x64 [ 236.407050][ T6853] kasan_populate_vmalloc+0x60/0x70 [ 236.408165][ T6853] alloc_vmap_area+0x1568/0x16a8 [ 236.409232][ T6853] __get_vm_area_node+0x18c/0x2f4 [ 236.410357][ T6853] __vmalloc_node_range+0xe4/0x8e4 [ 236.411372][ T6853] __vmalloc+0x130/0x1a8 [ 236.412284][ T6853] do_replace+0x30c/0x724 [ 236.413175][ T6853] do_ebt_set_ctl+0x1c0/0x1400 [ 236.414152][ T6853] nf_setsockopt+0x270/0x290 [ 236.415094][ T6853] ip_setsockopt+0x1d70/0x32cc [ 236.416027][ T6853] tcp_setsockopt+0x204/0x33ec [ 236.417000][ T6853] sock_common_setsockopt+0xb0/0xcc [ 236.418193][ T6853] smc_setsockopt+0x19c/0xdf8 [ 236.419167][ T6853] __sys_setsockopt+0x3a8/0x6b4 [ 236.420217][ T6853] __arm64_sys_setsockopt+0xb8/0xd4 [ 236.421280][ T6853] invoke_syscall+0x98/0x2b8 [ 236.422211][ T6853] el0_svc_common+0x138/0x258 [ 236.423207][ T6853] do_el0_svc+0x58/0x14c [ 236.424073][ T6853] el0_svc+0x7c/0x1f0 [ 236.424866][ T6853] el0t_64_sync_handler+0x84/0xe4 [ 236.425858][ T6853] el0t_64_sync+0x1a0/0x1a4 [ 236.427265][ T6853] syz.2.607: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 236.430312][ T6853] CPU: 1 PID: 6853 Comm: syz.2.607 Not tainted 5.15.169-syzkaller #0 [ 236.431877][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.433939][ T6853] Call trace: [ 236.434615][ T6853] dump_backtrace+0x0/0x530 [ 236.435575][ T6853] show_stack+0x2c/0x3c [ 236.436497][ T6853] dump_stack_lvl+0x108/0x170 [ 236.437545][ T6853] dump_stack+0x1c/0x58 [ 236.438473][ T6853] warn_alloc+0x220/0x37c [ 236.439403][ T6853] __vmalloc_node_range+0x290/0x8e4 [ 236.440496][ T6853] __vmalloc+0x130/0x1a8 [ 236.441485][ T6853] do_replace+0x30c/0x724 [ 236.442371][ T6853] do_ebt_set_ctl+0x1c0/0x1400 [ 236.443399][ T6853] nf_setsockopt+0x270/0x290 [ 236.444347][ T6853] ip_setsockopt+0x1d70/0x32cc [ 236.445242][ T6853] tcp_setsockopt+0x204/0x33ec [ 236.446290][ T6853] sock_common_setsockopt+0xb0/0xcc [ 236.447270][ T6853] smc_setsockopt+0x19c/0xdf8 [ 236.448211][ T6853] __sys_setsockopt+0x3a8/0x6b4 [ 236.449163][ T6853] __arm64_sys_setsockopt+0xb8/0xd4 [ 236.450197][ T6853] invoke_syscall+0x98/0x2b8 [ 236.451203][ T6853] el0_svc_common+0x138/0x258 [ 236.452176][ T6853] do_el0_svc+0x58/0x14c [ 236.452986][ T6853] el0_svc+0x7c/0x1f0 [ 236.453823][ T6853] el0t_64_sync_handler+0x84/0xe4 [ 236.454856][ T6853] el0t_64_sync+0x1a0/0x1a4 [ 236.455787][ T6853] Mem-Info: [ 236.456469][ T6853] active_anon:164 inactive_anon:14224 isolated_anon:0 [ 236.456469][ T6853] active_file:2827 inactive_file:3880 isolated_file:0 [ 236.456469][ T6853] unevictable:768 dirty:326 writeback:0 [ 236.456469][ T6853] slab_reclaimable:18726 slab_unreclaimable:92810 [ 236.456469][ T6853] mapped:24403 shmem:9930 pagetables:685 bounce:0 [ 236.456469][ T6853] kernel_misc_reclaimable:0 [ 236.456469][ T6853] free:1495195 free_pcp:3541 free_cma:7360 [ 236.464907][ T6853] Node 0 active_anon:656kB inactive_anon:56496kB active_file:11308kB inactive_file:15520kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:97612kB dirty:1304kB writeback:0kB shmem:39320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8808kB pagetables:2740kB all_unreclaimable? no [ 236.471143][ T6853] Node 0 DMA free:3076864kB min:20604kB low:25752kB high:30900kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:29440kB [ 236.476644][ T6853] lowmem_reserve[]: 0 0 3569 3569 3569 [ 236.477831][ T6853] Node 0 Normal free:2903916kB min:24448kB low:30560kB high:36672kB reserved_highatomic:0KB active_anon:656kB inactive_anon:56496kB active_file:11308kB inactive_file:15520kB unevictable:3072kB writepending:1304kB present:5242880kB managed:3658564kB mlocked:0kB bounce:0kB free_pcp:14680kB local_pcp:3804kB free_cma:0kB [ 236.483884][ T6853] lowmem_reserve[]: 0 0 0 0 0 [ 236.484886][ T6853] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 236.487982][ T6853] Node 0 Normal: 295*4kB (UM) 142*8kB (UE) 10*16kB (UM) 2*32kB (ME) 180*64kB (UME) 89*128kB (UME) 52*256kB (UM) 20*512kB (UM) 14*1024kB (M) 9*2048kB (ME) 689*4096kB (UM) = 2903916kB [ 236.491795][ T6853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.493805][ T6853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 236.495789][ T6853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 236.497668][ T6853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 236.499447][ T6853] 16504 total pagecache pages [ 236.500411][ T6853] 0 pages in swap cache [ 236.501334][ T6853] Swap cache stats: add 1541, delete 1541, find 2/3 [ 236.502792][ T6853] Free swap = 124484kB [ 236.503797][ T6853] Total swap = 124996kB [ 236.504679][ T6853] 2097152 pages RAM [ 236.505402][ T6853] 0 pages HighMem/MovableOnly [ 236.506380][ T6853] 412463 pages reserved [ 236.507234][ T6853] 8192 pages cma reserved [ 236.508072][ T6853] 0 pages hwpoisoned [ 236.822361][ T6846] loop6: detected capacity change from 0 to 32768 [ 236.861139][ T6839] loop0: detected capacity change from 0 to 32768 [ 236.868095][ T6874] loop4: detected capacity change from 0 to 64 [ 236.895759][ T6874] hfs: unable to parse mount options [ 237.571004][ T6839] XFS (loop0): Mounting V5 Filesystem [ 237.577654][ T6846] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 237.587037][ T6846] JBD2: Ignoring recovery information on journal [ 237.674567][ T6839] XFS (loop0): Ending clean mount [ 237.890926][ T6839] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x54/0x434, xfs_bnobt block 0x4 [ 237.901176][ T6839] XFS (loop0): Unmount and run xfs_repair [ 237.902266][ T6839] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 237.909979][ T6839] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 237.912324][ T6839] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 237.915414][ T6846] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 238.122012][ T6839] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 238.139844][ T6839] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 238.165276][ T6839] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 238.180868][ T6839] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.195162][ T6839] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.208125][ T6839] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 238.209881][ T6839] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x4 len 4 error 74 [ 238.229979][ T5767] ocfs2: Unmounting device (7,6) on (node local) [ 238.283640][ T6839] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x81c/0x12f4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 238.286693][ T6839] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 238.543588][ T6902] FAULT_INJECTION: forcing a failure. [ 238.543588][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.546800][ T4030] XFS (loop0): Unmounting Filesystem [ 238.870789][ T6902] CPU: 1 PID: 6902 Comm: syz.4.615 Not tainted 5.15.169-syzkaller #0 [ 238.872511][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.874525][ T6902] Call trace: [ 238.875173][ T6902] dump_backtrace+0x0/0x530 [ 238.876130][ T6902] show_stack+0x2c/0x3c [ 238.876992][ T6902] dump_stack_lvl+0x108/0x170 [ 238.877979][ T6902] dump_stack+0x1c/0x58 [ 238.878841][ T6902] should_fail+0x3b8/0x514 [ 238.879714][ T6902] should_fail_usercopy+0x20/0x30 [ 238.880625][ T6902] _copy_from_iter+0x1f0/0xcf0 [ 238.881620][ T6902] netlink_sendmsg+0x70c/0xb38 [ 238.882594][ T6902] ____sys_sendmsg+0x584/0x870 [ 238.883612][ T6902] ___sys_sendmsg+0x214/0x294 [ 238.884578][ T6902] __arm64_sys_sendmsg+0x1ac/0x25c [ 238.885737][ T6902] invoke_syscall+0x98/0x2b8 [ 238.886641][ T6902] el0_svc_common+0x138/0x258 [ 238.887582][ T6902] do_el0_svc+0x58/0x14c [ 238.888499][ T6902] el0_svc+0x7c/0x1f0 [ 238.889365][ T6902] el0t_64_sync_handler+0x84/0xe4 [ 238.890372][ T6902] el0t_64_sync+0x1a0/0x1a4 [ 239.236008][ T6864] loop2: detected capacity change from 0 to 40427 [ 239.360025][ T6864] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 239.361597][ T6864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.369542][ T6864] F2FS-fs (loop2): invalid crc value [ 239.544997][ T6913] loop5: detected capacity change from 0 to 64 [ 239.585582][ T6864] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 239.645178][ T6928] sch_fq: defrate 0 ignored. [ 239.648942][ T6913] hfs: unable to parse mount options [ 239.660756][ T6932] loop6: detected capacity change from 0 to 512 [ 240.615628][ T6932] EXT4-fs (loop6): 1 orphan inode deleted [ 240.616898][ T6932] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.625881][ T6932] FAULT_INJECTION: forcing a failure. [ 240.625881][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 240.628902][ T6932] CPU: 0 PID: 6932 Comm: syz.6.620 Not tainted 5.15.169-syzkaller #0 [ 240.630500][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.632514][ T6932] Call trace: [ 240.633148][ T6932] dump_backtrace+0x0/0x530 [ 240.634144][ T6932] show_stack+0x2c/0x3c [ 240.634889][ T6932] dump_stack_lvl+0x108/0x170 [ 240.635914][ T6932] dump_stack+0x1c/0x58 [ 240.636723][ T6932] should_fail+0x3b8/0x514 [ 240.637691][ T6932] __should_failslab+0xbc/0x110 [ 240.638662][ T6932] should_failslab+0x10/0x28 [ 240.639620][ T6932] slab_pre_alloc_hook+0x64/0xe8 [ 240.640732][ T6932] kmem_cache_alloc+0x98/0x45c [ 240.641698][ T6932] ext4_init_io_end+0x30/0x120 [ 240.642627][ T6932] ext4_writepages+0xad0/0x36fc [ 240.643511][ T6932] do_writepages+0x39c/0x5ec [ 240.644376][ T6932] filemap_fdatawrite_wbc+0x1c8/0x228 [ 240.645391][ T6932] filemap_write_and_wait_range+0x16c/0x244 [ 240.646604][ T6932] ext4_punch_hole+0x194/0xb84 [ 240.647607][ T6932] ext4_fallocate+0x278/0x1cc8 [ 240.648668][ T6932] vfs_fallocate+0x478/0x5b4 [ 240.649645][ T6932] ioctl_preallocate+0x2a0/0x34c [ 240.650558][ T6932] do_vfs_ioctl+0x1d00/0x2a38 [ 240.651597][ T6932] __arm64_sys_ioctl+0xe4/0x1c8 [ 240.652581][ T6932] invoke_syscall+0x98/0x2b8 [ 240.653557][ T6932] el0_svc_common+0x138/0x258 [ 240.654505][ T6932] do_el0_svc+0x58/0x14c [ 240.655431][ T6932] el0_svc+0x7c/0x1f0 [ 240.656309][ T6932] el0t_64_sync_handler+0x84/0xe4 [ 240.657347][ T6932] el0t_64_sync+0x1a0/0x1a4 [ 240.708965][ T6963] sctp: [Deprecated]: syz.0.616 (pid 6963) Use of int in max_burst socket option deprecated. [ 240.708965][ T6963] Use struct sctp_assoc_value instead [ 242.085135][ T6990] sctp: [Deprecated]: syz.0.632 (pid 6990) Use of int in max_burst socket option deprecated. [ 242.085135][ T6990] Use struct sctp_assoc_value instead [ 243.214015][ T6996] loop5: detected capacity change from 0 to 64 [ 243.274870][ T6996] hfs: unable to parse mount options [ 243.493317][ T7004] sctp: [Deprecated]: syz.2.637 (pid 7004) Use of int in max_burst socket option deprecated. [ 243.493317][ T7004] Use struct sctp_assoc_value instead [ 243.872769][ T7020] loop5: detected capacity change from 0 to 256 [ 244.118279][ T7020] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 244.244721][ T7022] FAULT_INJECTION: forcing a failure. [ 244.244721][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 244.274541][ T7022] CPU: 0 PID: 7022 Comm: syz.6.642 Not tainted 5.15.169-syzkaller #0 [ 244.276323][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.278269][ T7022] Call trace: [ 244.278909][ T7022] dump_backtrace+0x0/0x530 [ 244.279733][ T7022] show_stack+0x2c/0x3c [ 244.280596][ T7022] dump_stack_lvl+0x108/0x170 [ 244.281554][ T7022] dump_stack+0x1c/0x58 [ 244.282349][ T7022] should_fail+0x3b8/0x514 [ 244.283273][ T7022] __should_failslab+0xbc/0x110 [ 244.284254][ T7022] should_failslab+0x10/0x28 [ 244.285194][ T7022] slab_pre_alloc_hook+0x64/0xe8 [ 244.286176][ T7022] kmem_cache_alloc+0x98/0x45c [ 244.287158][ T7022] __d_alloc+0x3c/0x6a8 [ 244.288022][ T7022] d_alloc_pseudo+0x28/0x8c [ 244.288935][ T7022] alloc_file_pseudo+0x110/0x278 [ 244.289976][ T7022] __shmem_file_setup+0x19c/0x26c [ 244.291093][ T7022] shmem_file_setup+0x40/0x54 [ 244.292133][ T7022] __arm64_sys_memfd_create+0x374/0x610 [ 244.293218][ T7022] invoke_syscall+0x98/0x2b8 [ 244.294184][ T7022] el0_svc_common+0x138/0x258 [ 244.295123][ T7022] do_el0_svc+0x58/0x14c [ 244.296005][ T7022] el0_svc+0x7c/0x1f0 [ 244.296855][ T7022] el0t_64_sync_handler+0x84/0xe4 [ 244.297858][ T7022] el0t_64_sync+0x1a0/0x1a4 [ 244.387160][ T7028] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.406774][ T7028] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 244.421344][ T7028] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 244.791895][ T7038] loop6: detected capacity change from 0 to 16 [ 246.481204][ T7045] loop5: detected capacity change from 0 to 2048 [ 246.492723][ T7038] erofs: (device loop6): mounted with root inode @ nid 36. [ 246.620715][ T7045] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.230136][ T7040] loop4: detected capacity change from 0 to 40427 [ 248.061191][ T7040] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 248.072296][ T7040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 248.077976][ T7040] F2FS-fs (loop4): invalid crc value [ 248.098362][ T7074] loop5: detected capacity change from 0 to 1024 [ 248.100504][ T7040] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 249.304308][ T7074] EXT4-fs (loop5): Test dummy encryption mode enabled [ 249.305861][ T7074] EXT4-fs (loop5): Ignoring removed orlov option [ 249.323485][ T7074] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,sysvgroups,commit=0x0000000000000005,orlov,nobarrier,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 249.395517][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.398466][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.294111][ T7074] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 250.324689][ T7109] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 251.901539][ T7139] loop6: detected capacity change from 0 to 512 [ 252.850311][ T7139] EXT4-fs (loop6): Test dummy encryption mode enabled [ 252.971649][ T7139] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:163: inode #12: comm syz.6.668: inline data xattr refers to an external xattr inode [ 252.977085][ T7139] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.668: couldn't read orphan inode 12 (err -117) [ 252.983578][ T7139] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 253.781693][ T4013] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 254.158147][ T4013] Bluetooth: hci1: Injecting HCI hardware error event [ 254.166929][ T4028] Bluetooth: hci1: hardware error 0x00 [ 254.396546][ T7181] loop2: detected capacity change from 0 to 64 [ 255.247705][ T7139] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 255.255408][ T7139] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.668: Directory hole found for htree leaf block 0 [ 255.268384][ T7139] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.668: Directory hole found for htree leaf block 0 [ 255.276631][ T2054] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.278115][ T2054] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.940016][ T7224] loop2: detected capacity change from 0 to 4096 [ 257.928306][ T7237] loop4: detected capacity change from 0 to 128 [ 258.073653][ T7237] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.110303][ T7237] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.847848][ T7277] loop5: detected capacity change from 0 to 16 [ 261.607793][ T7277] erofs: (device loop5): mounted with root inode @ nid 36. [ 261.849840][ T4040] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 264.129847][ T7302] loop2: detected capacity change from 0 to 256 [ 265.304716][ T7320] loop0: detected capacity change from 0 to 256 [ 265.852623][ T7333] Invalid ELF header magic: != ELF [ 265.899787][ T7333] loop6: detected capacity change from 0 to 164 [ 267.312570][ T7340] loop5: detected capacity change from 0 to 8 [ 267.483413][ T7340] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 267.493121][ T7335] netlink: 'syz.6.723': attribute type 4 has an invalid length. [ 268.175907][ T7354] cramfs: Error -3 while decompressing! [ 268.177349][ T7354] cramfs: 0000000048589cdc(1306)->000000001f7e239d(4096) [ 268.179006][ T7354] cramfs: bad data blocksize 3221485966 [ 268.181005][ T7354] cramfs: Error -3 while decompressing! [ 268.182138][ T7354] cramfs: 0000000048589cdc(1306)->000000001f7e239d(4096) [ 269.594173][ T4134] Bluetooth: hci0: command 0x0405 tx timeout [ 269.629588][ T7364] loop4: detected capacity change from 0 to 128 [ 269.632617][ T7363] 9pnet: Insufficient options for proto=fd [ 269.723399][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.731'. [ 270.809177][ T7402] netem: change failed [ 270.855925][ T7399] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 272.017116][ T26] audit: type=1326 audit(784.470:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 272.022554][ T26] audit: type=1326 audit(784.470:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 272.034092][ T26] audit: type=1326 audit(784.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7424 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.003435][ T26] audit: type=1326 audit(785.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.013571][ T26] audit: type=1326 audit(785.460:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.026406][ T26] audit: type=1326 audit(785.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.030569][ T26] audit: type=1326 audit(785.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.104153][ T26] audit: type=1326 audit(785.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.108359][ T26] audit: type=1326 audit(785.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 273.112604][ T26] audit: type=1326 audit(785.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.5.752" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 276.582464][ T7489] loop6: detected capacity change from 0 to 128 [ 276.589123][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 276.627674][ T7489] EXT4-fs (loop6): Unrecognized mount option "rootcontext=root" or missing value [ 276.928469][ T7516] loop4: detected capacity change from 0 to 512 [ 276.981330][ T529] hid-generic 0009:8001:0001.0001: hidraw0: HID vffffff.e8 Device [syz1] on syz1 [ 277.039916][ T7512] netem: change failed [ 277.105967][ T7516] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 277.264220][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 277.264234][ T26] audit: type=1326 audit(789.720:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3697fa8 code=0x7ffc0000 [ 277.294350][ T26] audit: type=1326 audit(789.740:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffffa3697fa8 code=0x7ffc0000 [ 277.299982][ T26] audit: type=1326 audit(789.760:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3697fa8 code=0x7ffc0000 [ 277.319658][ T26] audit: type=1326 audit(789.760:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7535 comm="syz.2.786" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3697fa8 code=0x7ffc0000 [ 277.384270][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 277.386191][ T7541] netlink: 84 bytes leftover after parsing attributes in process `syz.0.788'. [ 277.449922][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.789'. [ 277.766051][ T26] audit: type=1326 audit(790.220:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 277.792178][ T26] audit: type=1326 audit(790.240:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=74 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 277.800299][ T26] audit: type=1326 audit(790.250:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 277.820500][ T26] audit: type=1326 audit(790.260:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 277.850980][ T26] audit: type=1326 audit(790.260:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 277.875938][ T26] audit: type=1326 audit(790.260:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7567 comm="syz.6.797" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 278.115973][ T7597] loop6: detected capacity change from 0 to 512 [ 278.242067][ T7597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.806: inode #1: comm syz.6.806: iget: illegal inode # [ 278.255933][ T7608] loop4: detected capacity change from 0 to 64 [ 278.284253][ T7597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.806: error while reading EA inode 1 err=-117 [ 278.300481][ T7597] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 278.319602][ T7597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.806: inode #1: comm syz.6.806: iget: illegal inode # [ 278.325606][ T7608] hfs: unable to parse mount options [ 278.357182][ T7597] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.806: error while reading EA inode 1 err=-117 [ 278.370958][ T7597] EXT4-fs (loop6): 1 orphan inode deleted [ 278.372692][ T7597] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 278.765400][ T7631] loop4: detected capacity change from 0 to 256 [ 278.930438][ T7631] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 279.170249][ T7636] netlink: 256 bytes leftover after parsing attributes in process `syz.0.818'. [ 279.172337][ T7636] nbd: must specify a device to reconfigure [ 279.538106][ T7664] udc-core: couldn't find an available UDC or it's busy [ 279.539576][ T7664] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 279.568858][ T7664] netlink: 260 bytes leftover after parsing attributes in process `syz.5.829'. [ 279.863389][ T7699] device pim6reg1 entered promiscuous mode [ 279.922270][ T7703] netem: change failed [ 280.639734][ T7756] loop0: detected capacity change from 0 to 64 [ 280.675631][ T7756] hfs: unable to parse mount options [ 280.738582][ T7769] batman_adv: Cannot find parent device [ 280.771451][ T7771] syz.5.872 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.143045][ T7785] loop0: detected capacity change from 0 to 256 [ 281.366146][ T7785] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 281.717791][ T7791] loop5: detected capacity change from 0 to 512 [ 281.721131][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.6.885'. [ 281.775983][ T7797] loop6: detected capacity change from 0 to 8192 [ 281.828874][ T7791] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 281.831300][ T7791] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 281.858095][ T7797] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 281.860069][ T7797] REISERFS (device loop6): using ordered data mode [ 281.861097][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 281.861362][ T7797] reiserfs: using flush barriers [ 281.875690][ T7791] EXT4-fs (loop5): 1 truncate cleaned up [ 281.876939][ T7791] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,init_itable,quota,,errors=continue. Quota mode: writeback. [ 281.886034][ T7797] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.889499][ T7797] REISERFS (device loop6): checking transaction log (loop6) [ 282.091724][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.094348][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.096341][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.098244][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.100538][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.103032][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.134681][ T7816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.136886][ T7816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.155601][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.159139][ T7797] REISERFS (device loop6): Using tea hash to sort names [ 282.160864][ T7797] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 282.164809][ T7816] device batadv_slave_0 entered promiscuous mode [ 282.178884][ T7797] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 282.223862][ T7797] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 282.319317][ T26] kauditd_printk_skb: 138 callbacks suppressed [ 282.319331][ T26] audit: type=1326 audit(1050.774:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.339990][ T26] audit: type=1326 audit(1050.794:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.351963][ T26] audit: type=1326 audit(1050.804:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.366828][ T26] audit: type=1326 audit(1050.804:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.383974][ T26] audit: type=1326 audit(1050.804:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.399377][ T26] audit: type=1326 audit(1050.814:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.570639][ T26] audit: type=1326 audit(1050.814:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.585857][ T26] audit: type=1326 audit(1050.814:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.590140][ T26] audit: type=1326 audit(1050.814:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 282.601139][ T26] audit: type=1326 audit(1050.814:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.896" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 283.815544][ T7841] vhci_hcd: invalid port number 97 [ 283.816509][ T7841] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 283.975804][ T7844] bond1 (unregistering): Released all slaves [ 284.229278][ T7861] loop5: detected capacity change from 0 to 1024 [ 284.272811][ T7861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=d000c09c, mo2=0002] [ 284.276284][ T7861] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,block_validity,resuid=0x0000000000000000,noblock_validity,minixdf,debug,journal_ioprio=0x0000000000000006,data_err=abort,,errors=continue. Quota mode: writeback. [ 284.417312][ T7836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.900'. [ 284.430860][ T7836] bridge0: port 4(vlan2) entered blocking state [ 284.435829][ T7836] bridge0: port 4(vlan2) entered disabled state [ 285.546107][ T7887] netlink: 56 bytes leftover after parsing attributes in process `syz.5.911'. [ 285.560422][ T7888] rdma_op 000000009eda9551 conn xmit_rdma 0000000000000000 [ 285.733299][ T7899] loop5: detected capacity change from 0 to 512 [ 286.709851][ T7899] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.919: corrupted xattr block 255 [ 286.738778][ T7899] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 286.740404][ T7899] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 286.745641][ T7899] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.919: corrupted xattr block 255 [ 288.186272][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 288.186286][ T26] audit: type=1326 audit(1056.644:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.214611][ T26] audit: type=1326 audit(1056.674:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 288.226505][ T26] audit: type=1326 audit(1056.674:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=237 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.261702][ T26] audit: type=1326 audit(1056.674:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.304907][ T26] audit: type=1326 audit(1056.674:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.311369][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.325080][ T26] audit: type=1326 audit(1056.674:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=195 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.349370][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.372576][ T26] audit: type=1326 audit(1056.684:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 288.380067][ T7943] loop0: detected capacity change from 0 to 128 [ 288.385584][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.398615][ T26] audit: type=1326 audit(1056.684:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 288.424156][ T26] audit: type=1326 audit(1056.684:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7930 comm="syz.6.928" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa51d2fa8 code=0x7ffc0000 [ 288.464538][ T26] audit: type=1326 audit(1056.674:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.5.924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb31b2fa8 code=0x7ffc0000 [ 288.516063][ T7943] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.623542][ T7935] infiniband syz0: set active [ 288.626522][ T21] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.628153][ T7935] infiniband syz0: added ip6_vti0 [ 288.649554][ T7935] RDS/IB: syz0: added [ 288.651077][ T7935] smc: adding ib device syz0 with port count 1 [ 288.652767][ T7935] smc: ib device syz0 port 1 has pnetid [ 288.656266][ T21] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.659882][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.952774][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.6.934'. [ 289.064980][ T7946] loop2: detected capacity change from 0 to 8192 [ 289.126247][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.158714][ T7957] netlink: 'syz.6.935': attribute type 10 has an invalid length. [ 289.219486][ T7946] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 289.221489][ T7946] REISERFS (device loop2): using ordered data mode [ 289.222802][ T7946] reiserfs: using flush barriers [ 289.259725][ T7946] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 289.263266][ T7946] REISERFS (device loop2): checking transaction log (loop2) [ 289.277499][ T7957] team0: Port device netdevsim0 added [ 289.410135][ T7960] loop4: detected capacity change from 0 to 2048 [ 289.448161][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.557985][ T4016] loop4: p3 < > p4 < > [ 289.571417][ T4016] loop4: partition table partially beyond EOD, truncated [ 289.580046][ T7964] Cannot find add_set index 0 as target [ 289.601382][ T4016] loop4: p3 start 4284289 is beyond EOD, truncated [ 289.624097][ T7946] REISERFS (device loop2): Using tea hash to sort names [ 289.625896][ T7946] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 289.628963][ T7946] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 289.662059][ T7960] loop4: p3 < > p4 < > [ 289.662986][ T7960] loop4: partition table partially beyond EOD, truncated [ 289.678650][ T7960] loop4: p3 start 4284289 is beyond EOD, truncated [ 289.681954][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.787822][ T7972] loop6: detected capacity change from 0 to 2048 [ 289.876607][ T7935] ip6_vti0 speed is unknown, defaulting to 1000 [ 289.919248][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.010853][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.063603][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.129738][ T7987] netlink: 24 bytes leftover after parsing attributes in process `syz.5.948'. [ 290.213720][ T7991] loop6: detected capacity change from 0 to 512 [ 290.223237][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.238465][ T7994] netlink: 'syz.2.952': attribute type 3 has an invalid length. [ 290.298882][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 290.301796][ T7999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 290.308676][ T7991] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 290.317609][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.344139][ T7999] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 290.351387][ T7999] netlink: 11 bytes leftover after parsing attributes in process `syz.2.954'. [ 290.390339][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.403860][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.479423][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.503046][ T8006] EXT4-fs (loop6): shut down requested (2) [ 290.570928][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.636856][ T8010] loop2: detected capacity change from 0 to 2048 [ 290.661460][ T5166] udevd[5166]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 290.696141][ T8012] rdma_rxe: already configured on ip6_vti0 [ 290.799724][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.965'. [ 291.790702][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.6.964'. [ 292.062003][ T8041] ip6_vti0 speed is unknown, defaulting to 1000 [ 292.070166][ T8045] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 292.202389][ T8051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'. [ 292.278993][ T8049] tipc: Started in network mode [ 292.280362][ T8049] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 292.308435][ T8049] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 292.311426][ T8049] tipc: Enabled bearer , priority 10 [ 292.406004][ T8059] loop6: detected capacity change from 0 to 1024 [ 292.411226][ T8058] loop5: detected capacity change from 0 to 2048 [ 292.455655][ T8059] EXT4-fs (loop6): INFO: recovery required on readonly filesystem [ 292.457393][ T8059] EXT4-fs (loop6): write access will be enabled during recovery [ 292.459175][ T8059] JBD2: no valid journal superblock found [ 292.460701][ T8059] EXT4-fs (loop6): error loading journal [ 293.317300][ T4134] tipc: Node number set to 1 [ 293.802440][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 293.805207][ T8081] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 293.863598][ T8080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.866971][ T8080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.921639][ T26] kauditd_printk_skb: 125 callbacks suppressed [ 293.921653][ T26] audit: type=1326 audit(1318.367:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 293.930857][ T26] audit: type=1326 audit(1318.387:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 293.946165][ T26] audit: type=1326 audit(1318.387:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 293.961529][ T26] audit: type=1326 audit(1318.387:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 293.983885][ T26] audit: type=1326 audit(1318.387:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.004887][ T26] audit: type=1326 audit(1318.387:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.032840][ T26] audit: type=1326 audit(1318.387:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.151229][ T26] audit: type=1326 audit(1318.397:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.183509][ T26] audit: type=1326 audit(1318.397:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.213019][ T26] audit: type=1326 audit(1318.397:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaf9e9fa8 code=0x7ffc0000 [ 294.525655][ T8099] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.622010][ T8099] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.778536][ T8099] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.842438][ T8135] loop5: detected capacity change from 0 to 764 [ 295.963549][ T8099] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.236515][ T8099] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.255737][ T8099] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.277249][ T8099] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.299331][ T8099] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.414397][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.416577][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.418457][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.420407][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.422351][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.452511][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.454659][ T8150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.460110][ T8150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.539384][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 296.813243][ T8174] Cannot find del_set index 4 as target [ 296.930312][ T8179] loop4: detected capacity change from 0 to 1024 [ 297.133572][ T8189] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1033'. [ 297.165913][ T8179] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 298.359221][ T8213] [ 298.359807][ T8213] ====================================================== [ 298.361124][ T8213] WARNING: possible circular locking dependency detected [ 298.362466][ T8213] 5.15.169-syzkaller #0 Not tainted [ 298.363389][ T8213] ------------------------------------------------------ [ 298.364809][ T8213] syz.0.1044/8213 is trying to acquire lock: [ 298.365973][ T8213] ffff0000ca828c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xd0/0x1c0 [ 298.368247][ T8213] [ 298.368247][ T8213] but task is already holding lock: [ 298.369830][ T8213] ffff800016e66da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 298.371710][ T8213] [ 298.371710][ T8213] which lock already depends on the new lock. [ 298.371710][ T8213] [ 298.373722][ T8213] [ 298.373722][ T8213] the existing dependency chain (in reverse order) is: [ 298.375582][ T8213] [ 298.375582][ T8213] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 298.375602][ T8219] loop6: detected capacity change from 0 to 512 [ 298.377251][ T8213] __mutex_lock_common+0x194/0x2154 [ 298.377269][ T8213] mutex_lock_nested+0xa4/0xf8 [ 298.377278][ T8213] rfkill_register+0x44/0x7a4 [ 298.381813][ T8213] hci_register_dev+0x3e0/0x880 [ 298.382850][ T8213] vhci_create_device+0x2c4/0x568 [ 298.383978][ T8213] vhci_write+0x318/0x3b8 [ 298.384930][ T8213] vfs_write+0x884/0xb44 [ 298.385841][ T8213] ksys_write+0x15c/0x26c [ 298.386758][ T8213] __arm64_sys_write+0x7c/0x90 [ 298.387825][ T8213] invoke_syscall+0x98/0x2b8 [ 298.388853][ T8213] el0_svc_common+0x138/0x258 [ 298.389890][ T8213] do_el0_svc+0x58/0x14c [ 298.390968][ T8213] el0_svc+0x7c/0x1f0 [ 298.391812][ T8213] el0t_64_sync_handler+0x84/0xe4 [ 298.392947][ T8213] el0t_64_sync+0x1a0/0x1a4 [ 298.394027][ T8213] [ 298.394027][ T8213] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 298.395629][ T8213] __mutex_lock_common+0x194/0x2154 [ 298.396792][ T8213] mutex_lock_nested+0xa4/0xf8 [ 298.397954][ T8213] vhci_send_frame+0x8c/0x10c [ 298.398995][ T8213] hci_send_frame+0x194/0x2f0 [ 298.400121][ T8213] hci_tx_work+0x9ac/0x16cc [ 298.401050][ T8213] process_one_work+0x790/0x11b8 [ 298.402105][ T8213] worker_thread+0x910/0x1034 [ 298.403139][ T8213] kthread+0x37c/0x45c [ 298.404093][ T8213] ret_from_fork+0x10/0x20 [ 298.405137][ T8213] [ 298.405137][ T8213] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 298.407002][ T8213] __flush_work+0xf8/0x1c0 [ 298.408137][ T8213] flush_work+0x24/0x38 [ 298.409079][ T8213] hci_dev_do_close+0x16c/0x1060 [ 298.410166][ T8213] hci_unregister_dev+0x248/0x4d4 [ 298.411240][ T8213] vhci_release+0x74/0xc4 [ 298.412171][ T8213] __fput+0x1c4/0x800 [ 298.413196][ T8213] ____fput+0x20/0x30 [ 298.414087][ T8213] task_work_run+0x130/0x1e4 [ 298.415105][ T8213] do_exit+0x670/0x20bc [ 298.416046][ T8213] do_group_exit+0x110/0x268 [ 298.417056][ T8213] __wake_up_parent+0x0/0x60 [ 298.418141][ T8213] invoke_syscall+0x98/0x2b8 [ 298.419250][ T8213] el0_svc_common+0x138/0x258 [ 298.420384][ T8213] do_el0_svc+0x58/0x14c [ 298.421388][ T8213] el0_svc+0x7c/0x1f0 [ 298.422369][ T8213] el0t_64_sync_handler+0x84/0xe4 [ 298.423536][ T8213] el0t_64_sync+0x1a0/0x1a4 [ 298.424646][ T8213] [ 298.424646][ T8213] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 298.426303][ T8213] __mutex_lock_common+0x194/0x2154 [ 298.427545][ T8213] mutex_lock_nested+0xa4/0xf8 [ 298.428610][ T8213] bg_scan_update+0x9c/0x470 [ 298.429626][ T8213] process_one_work+0x790/0x11b8 [ 298.430693][ T8213] worker_thread+0x910/0x1034 [ 298.431888][ T8213] kthread+0x37c/0x45c [ 298.432763][ T8213] ret_from_fork+0x10/0x20 [ 298.433788][ T8213] [ 298.433788][ T8213] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 298.435927][ T8213] __lock_acquire+0x32d4/0x7638 [ 298.436997][ T8213] lock_acquire+0x240/0x77c [ 298.437984][ T8213] __flush_work+0xf8/0x1c0 [ 298.439103][ T8213] __cancel_work_timer+0x3ec/0x548 [ 298.440185][ T8213] cancel_work_sync+0x24/0x38 [ 298.441134][ T8213] hci_request_cancel_all+0xcc/0x2d0 [ 298.442447][ T8213] hci_dev_do_close+0x54/0x1060 [ 298.443548][ T8213] hci_rfkill_set_block+0xdc/0x1d0 [ 298.444743][ T8213] rfkill_set_block+0x18c/0x37c [ 298.445828][ T8213] rfkill_fop_write+0x594/0x750 [ 298.446856][ T8213] do_iter_write+0x33c/0x66c [ 298.447793][ T8213] do_writev+0x220/0x3ec [ 298.448744][ T8213] __arm64_sys_writev+0x80/0x94 [ 298.449939][ T8213] invoke_syscall+0x98/0x2b8 [ 298.451016][ T8213] el0_svc_common+0x138/0x258 [ 298.452064][ T8213] do_el0_svc+0x58/0x14c [ 298.453019][ T8213] el0_svc+0x7c/0x1f0 [ 298.453846][ T8213] el0t_64_sync_handler+0x84/0xe4 [ 298.454946][ T8213] el0t_64_sync+0x1a0/0x1a4 [ 298.455927][ T8213] [ 298.455927][ T8213] other info that might help us debug this: [ 298.455927][ T8213] [ 298.458009][ T8213] Chain exists of: [ 298.458009][ T8213] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 298.458009][ T8213] [ 298.461288][ T8213] Possible unsafe locking scenario: [ 298.461288][ T8213] [ 298.462796][ T8213] CPU0 CPU1 [ 298.463801][ T8213] ---- ---- [ 298.464847][ T8213] lock(rfkill_global_mutex); [ 298.465826][ T8213] lock(&data->open_mutex); [ 298.467342][ T8213] lock(rfkill_global_mutex); [ 298.468835][ T8213] lock((work_completion)(&hdev->bg_scan_update)); [ 298.470274][ T8213] [ 298.470274][ T8213] *** DEADLOCK *** [ 298.470274][ T8213] [ 298.471855][ T8213] 1 lock held by syz.0.1044/8213: [ 298.473011][ T8213] #0: ffff800016e66da8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x250/0x750 [ 298.475077][ T8213] [ 298.475077][ T8213] stack backtrace: [ 298.476202][ T8213] CPU: 0 PID: 8213 Comm: syz.0.1044 Not tainted 5.15.169-syzkaller #0 [ 298.477840][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.479906][ T8213] Call trace: [ 298.480620][ T8213] dump_backtrace+0x0/0x530 [ 298.481588][ T8213] show_stack+0x2c/0x3c [ 298.482412][ T8213] dump_stack_lvl+0x108/0x170 [ 298.483375][ T8213] dump_stack+0x1c/0x58 [ 298.484292][ T8213] print_circular_bug+0x150/0x1b8 [ 298.485445][ T8213] check_noncircular+0x2cc/0x378 [ 298.486497][ T8213] __lock_acquire+0x32d4/0x7638 [ 298.487442][ T8213] lock_acquire+0x240/0x77c [ 298.488449][ T8213] __flush_work+0xf8/0x1c0 [ 298.489540][ T8213] __cancel_work_timer+0x3ec/0x548 [ 298.490642][ T8213] cancel_work_sync+0x24/0x38 [ 298.491682][ T8213] hci_request_cancel_all+0xcc/0x2d0 [ 298.492874][ T8213] hci_dev_do_close+0x54/0x1060 [ 298.493923][ T8213] hci_rfkill_set_block+0xdc/0x1d0 [ 298.494976][ T8213] rfkill_set_block+0x18c/0x37c [ 298.495911][ T8213] rfkill_fop_write+0x594/0x750 [ 298.496910][ T8213] do_iter_write+0x33c/0x66c [ 298.497815][ T8213] do_writev+0x220/0x3ec [ 298.498699][ T8213] __arm64_sys_writev+0x80/0x94 [ 298.499693][ T8213] invoke_syscall+0x98/0x2b8 [ 298.500700][ T8213] el0_svc_common+0x138/0x258 [ 298.501575][ T8213] do_el0_svc+0x58/0x14c [ 298.502527][ T8213] el0_svc+0x7c/0x1f0 [ 298.503285][ T8213] el0t_64_sync_handler+0x84/0xe4 [ 298.504348][ T8213] el0t_64_sync+0x1a0/0x1a4 [ 298.572491][ T8219] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1045: inode #1: comm syz.6.1045: iget: illegal inode # [ 298.576675][ T8219] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1045: error while reading EA inode 1 err=-117 [ 298.583930][ T8219] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1045: inode #1: comm syz.6.1045: iget: illegal inode # [ 298.595762][ T8219] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1045: error while reading EA inode 1 err=-117 [ 298.601921][ T8219] EXT4-fs (loop6): 1 orphan inode deleted [ 298.607800][ T8219] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.