last executing test programs: 27m12.816922316s ago: executing program 32 (id=10): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x803026, 0x0) fallocate(r0, 0x10, 0xfffffffffffffffc, 0xac9a) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r1, &(0x7f0000000300)=""/56, 0x38) chdir(&(0x7f0000000400)='./file0\x00') 27m2.620867307s ago: executing program 33 (id=28): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15c01}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x8000}]}}}]}, 0x38}}, 0x24004880) 26m5.889994246s ago: executing program 34 (id=121): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@nodelalloc}, {@norecovery}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x11) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 25m58.572561712s ago: executing program 35 (id=138): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r0, r1, 0x0, 0xfffe7e) 25m50.014664283s ago: executing program 36 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 25m4.718912474s ago: executing program 37 (id=232): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000700)={[{@acl}, {@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@coherency_full}, {@resv_level}, {@err_cont}, {@user_xattr}, {@barrier={'barrier', 0x3d, 0x6603}}, {@data_writeback}, {@intr}, {@journal_async_commit}]}, 0x1, 0x442a, &(0x7f0000008940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) sendfile(r1, r2, 0x0, 0xf31c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000001}) 24m49.101062642s ago: executing program 38 (id=260): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000005b72d72000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000000000000005000000000000000000000000000000ff7f00000000000008000000000000000101030000"], 0xb8}}, 0x0) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 24m42.988238337s ago: executing program 39 (id=273): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0xd5, &(0x7f0000000240)={0x0, 0x770, 0x1000, 0x0, 0x18d}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 24m39.158987524s ago: executing program 40 (id=283): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @mcast2}, 0x1c) 23m24.76264823s ago: executing program 41 (id=419): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 23m19.407185583s ago: executing program 42 (id=435): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0xa9a4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x0, 0x0, 0x6492, 0x8, 0x0, 0x1], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) 22m14.640590402s ago: executing program 43 (id=538): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1, 0x8, &(0x7f00000002c0)='\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4004, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 14m59.618203328s ago: executing program 44 (id=1700): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14}, [], {0x14}}, 0x28}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x7, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setpgid(0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x20040840) close_range(r0, r1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 12m15.692903007s ago: executing program 7 (id=2097): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000880)=0x10003, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000380), 0x0, 0x10102, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000022000103780000000000000001"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12m7.129164482s ago: executing program 45 (id=2082): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="d8f20e49aff98a98d85257bf91bc026308549195d3b348e50406d3e3894454fd0ea59a06a6328682c321a20ae1b9efcbb85b3f79c3693ad863f524d1f94767a74e5ca52a8be59a80619fead9506f925053c33010506bfb2e263a83756a83681d30d24d612d1c", 0x66}, {&(0x7f0000000ec0)="69536f8688855f33", 0x8}], 0x2}}], 0x1, 0x40000) connect$unix(r4, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, r7, r8, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) unshare(0x62040200) 12m7.003813472s ago: executing program 7 (id=2108): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtfilter={0x1240, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0xffe0}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1210, 0x2, [@TCA_CGROUP_ACT={0x120c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "2eb1f0270ba27f436fc34a925ca35e2b47c9160a7b284261d4fd11c8797dd937c368c22baf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x3c, 0x16, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x26cf, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x13c, 0xe, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffff5, 0x2, 0x1, 0x4}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x6, 0x0, 0x6, 0x4}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x7, 0x6, 0x4}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x0, 0x6, 0x7}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x2, 0xa93, 0x5}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff0, 0x1, 0x3, 0x3ff}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xcce, 0x1, 0x6, 0x4fc7a854}, 0x7d}}]}, {0x49, 0x6, "6c8b980d223616382268ace1db6f1f19b29041b131ef9e8fc0cd466405fa7744b2e3a8632ebd6617a09865e4307bbe05f5006b9a2baa9ffd09f21cab0d3180a8073953bdf3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0xf54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x6, 0x6, 0x3, 0xff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12cd, 0xee6f949b7e914fa0}}]}, {0xf04, 0x6, "d4dea8476ca1d178449e7751f9c73a21aa470ae4fdc9643d605dbc965ed9826f2600253aa1896d07d200e33ac6844e6a994cd51d77995a88f6540d0e0ff06996c4e5de13d3ec0f6ab5e99482999a622c87ef21cc2628ab57a9ffd72e9355de36134407554f71813b145da76debf3184047e2b6737f9ccc8d29babd44adfdece78eab2e3340c2fb436261a7ab6c7e75a1e8c18c8275e6c5f515c26e694110cacba4fe365ad730fa655d8159dc00795fea3ddf79cc2e8ba2720c31f849d1f6a37b4f4803fc7d04f0fa47246040e8975654504f1315954e293f929040b7efdd7be469ef04f81c4c46c79f3159656ee397390a037c7177d159a41edc58c4fa079b3ad801f2b4fca20c4545235caa5d9047d21100015ee6b2c6c4718dfd7113a830f59f0cbfdb00d4de693cff65535cb22d959809b7663a72dfa34367d406630e031d38fbc7a2c8b3710e4f62206d0ff92f0ed68d1152a65a41b0afad22f66b6490d0a247ca2b826ecb4cdee879f02bf9301d0e956e8ae9e0a73043763705387a4e733972c18d387cbb8b289c687ee0f26977809bce644978e463ef443c16cb863005e29af37b2104a6923c7ac868e086c2ad74082cf3c1efd192ca41b1d59b056e5f56d70b246c2c95948eb73e29c97afdddce0d3b9ec63bc8fcfb720a92800e5a6c7b926b50ddb5a2127a4cce882dc826c907ed4303631c84999fd035d5f398461ba9d0a748fd4dfa02578ed6fb643d7e29dbe6b8d5a19b7e7f283294e526adb502442da3a62da5332254e56d5cbe4a5228f3c473682b75d429bedd4b42c213cbc430a61252160c39c426df210f1d709f09ac84718b275ccc3d4cf84a71c5fbdd03ec7ed47ef478d2854f27ff1cbea6863b18ad2bc7f5e6ab2ba99a7fd8caae68561e34d0101456e7793027b1fe8986e4e8c00f9039269304b2e035aa786e4a892e5c5eafa15059e39a4c84c6d6b12db3b7f5036719a4cc5c509214a95cbebebcd6f17b5d7c65422be5f071af9cc9b346b5410c4b8ac039babe4f4cfceb26b5618b89fc407c60c27e2b5da31d7710f5b0422d0815e037a2abb8d4e8b51099f794cac73d471b335e81e21af8ad354e528283fb239dd6d49fbf06334fd8a8f108b9ce72dee336d99195c5a388737c7c7d010551584339f556e4c6b3959d5c3a3a2fbc17f8bc90b5723c745b1842b926594cd6c8ac178a2370b157a07fa31b16b8ab770a9f396e2e33a11160a9a3a8020dceee03eedcbb30bb3c43134c9812c4ef9b2547d7882c9cd450e72a0eeedb8bf8430060d59a0b83f3f92be0052d140d8da41ce387b158ec98a1541401a3b9719d585fbb6eb155fc920993476f7a323a41fe55febf2fe98770183a390c04d455eedcca6c6006465c0c726e5b2877e81617267f28039a83077cc5e25ab8cadcde902de12757618af544266e6f9abae8fd41fa93dd208436e5dd35e8339c5196965ca508d2f331090a04f14b24cbcd483bbcb2d95b0647090269344ebe7279a122efe687dbae7caa71a28e9137ae1bf38bd7e97d98bda820ee98685f12821dcb25600336a95bfc20ac390bdb4591ee36526c75f6a66ff414d71e7309e6777a075995e2865dc274da09acb3ca43f58fc955b70f131ca7940a6064de912980a9575d17178fe9ba40b4a170fe0fc47651b0ef57bc73a77328b118bcb8200a01144a84ac9650a05512d9b5b8d5ed4d5f7269b44fa145dd90eda6cece1858bb468b39d8c07d16032a8725d0329bc2d5b8e5cf82be45faff3c711a9c4385a2950d26006efaffe68fb93cc0160b2ea5170530382767bf8a40d6f9b2e3d9de72f236706b16b0f8f096443a2802412ec7fcdcf80f55533297842f70974b35eae1bdd36796fc8172f4e6a6910742bc28839aba5ea057847b6f841c2bdd6cefceec3455252ce83b1a1785ad9de0c399513d48c892b7c3b92aca74f1772f7e2e1b25d4f2c73c89d5f070194345c8b49724a759be1f6c101263556540f94e6b9e715752b6720c4657bc616b5fe08a60452a9126c7dde3918cd32f88a64bf526dee55a28073077093c2d8420befd4c21c91458a0ad1d2b033023a1f0d9c3400c56ca3696f0087476823da533ba4c1e610b122ba454594f2874e5c4ee8b5623fa201ac6d1c39470c7c6bfa5d09948f40e966f66a7c321348e1317e36e40122958b76043a6bbbea2d680c77bf9f22cf544ec6d26e26d68aaad1406f7b0c62dc1981b7c67d400b14efe311e9ef78a76cca4bda4460935bb7dae23019bf7802a9883079f833c64973c308565a2c6e5a62122925d3e86ef3d236de3cef73809e383bef88285da995e291368c2fdbea5fb82346f7a3ff0a13b02f93bae4b77604d4732e9e5e319d260425bf69a3f03e2ea6af1fa30a9056eaafde330d5541e1480cf22c9a43d134492024394c37d8b84c6f82f31b92aeb163d82e37e32d4f414d3d56a95d2fbd01ab576c0e5b6816464b4ccecc0200d2b25b95d2c86955a4cc7c5ac833f9d3cac4eabb6664004cf7f2f3ff894f830df3c227483c7843a6619f84a60b1c7b77967bb0ea6e02464b838811ac7e22ea5ada3182473f178c5a50be699fbc35c44286c6da6406a2a2a092237ecfdf434dd5120b9cf340d432c1ddb68a512102a603a5330362a78ae0a9054344140a4b2adb7886d9dbea4f010a679bf9789fa01055074f65a53d466d4653b7232e5c4ecc07e62d2a8b37c46ff462d2e3d46b71f513813573837836c2f94f208688f045a6d7f9d7772b8c7d6651e5b2fbf575abfe665fe2a9b9338fd485a01bcf443697407ec05a6fb56bc6e5f376f03b445264a568e1db253c657d3ef4c1839dc886d8f3c2bbaef87c589243b1cc25db3206b5e1873c49e3200b5e9e701ba2c5225f2aed1c30389323d433a6f8d75ca2565d6795258e66c997dbff5095a2516456c29c61f572784e712d703c55492fbc1261eac643b9dab8d9bf62f1df8605805fb06d687e87cc5bdceb550ee1995795ae61e0efbaf15b42997facde9fcb6235db4a97f9008fd7564c43e909178d1665e9af804f55372470f743f6c6b0999a6b4db756727e7bddca10767da5d842c6933cb014154947f1321a6e49ae5f7d1a3fae1045c655a6dcfd5e75a850727141ca1ec97a3dda9e434b4a23e2d792c030250e1e9b8fe6c543b4e087707f58064e53fb23cebf9e18664cf0fbe7e6b1ddd6a85e9b5a18a463058b44d02061f66ad66810e71527255fd1b32e3bb23633efeacc8a41a9b071de26f9b15318a3d05153afb75ef96ebe408968c76d106b7fb113cc2549690a43d6e24ef7dfcf2cafd6ef9ecaf01fcc1ef72dcfba7f88e8529b946c8aee73fba90615709b9218b8a69c02505883ba3123437287c240eba206d48d471efde4eee38d18938f11b353302f401840e7c60f8f8c40c1b44e9a248c9f9eb2e40c89db1996c97ba01ec041177f032a17838ba909355631d0c3292e480bb186728ffdf93744d4f482fea10b7c16077b50b0b6496b88ba3fa4e9564155c5c565d459e445a651682f359924ed3f3eb9b8c4ae2ef087262ae8f226f4b6c31f396cb049ffc695bb42f174b56bec4984b1ab03d0806d99d9e688f38b9319a126f15f58669ded20fcd6fd3f9b92041bf6dbd042264000005487d02d41379e53fc2097e65e9f783f18a04ec48e4313e26fec681e99fec1ec2f0c2eb4651ec3ee3364b81593e3d287cdff9a184cc33aa47876c66330dffb27f2e9357bea3088c4496124bf7360c6716be6965bf5e7e4795376d3a486931a6d5a46b07f7e7248f5919396daed59cb8207dab1ef248aff6dac5bb124ced2dd94e44fa32b0310afc71cff52da84fbfa30d591231d35c20ab7af916ff8537fa8ea82977e643fcd30d6ee4bd2c5f8a9c6c942def6838de26dde6c3baf055499498cdac26f632c5fd586c99a07602b209d6c54f04b6f7fdcdcf989a2762cc45f391e86fd5d6fce53bb6963c46fcb5996d61476d7450eabdc159af2e10028d2a4687b64481121126334c45c2be9feedb626c5441968579db08fa492501bcba50e3d809555914abc6504e1b9083af368a29334e1aa40fed4d7053ec49b85af2acb193259712dd5da73071a8f44f1080cf141d95eec9a98948e10ea27f92873b8d21f170ad4adf37c6167958d1fac2d0d90d6f15f994e804e9b121fd5206e96faa968c2afc78531680cdd8af208d6af98ca7bd3ba54db4533cbb74bc96d47e684c62f4da35d536408d7c8ef44e6a05ded425325f326168017830d5016f69cca8bf839431a0493451da26f0d6d2f2fbb8f2fb2d04646728e337d774499f3b19afbc439d2b296c10e88ae14d8bb1014f61abd868de38b705c00d9cfc160ef15107192f26eceb67c2e54fd21eb6058b55a0d284ac9e3938daa560fa2638e04e0981dde3d5cf03d0b8f5c44839ede0f0065bb7b93e8c396ca56a6a8be99a3641c1b83d64c7d2b7aadcc91fe883c2023f3ec3d17ec160956b0c977ee9f0df65f8717481cf1a6512f19ebc022d20d0abfdf7713211127c749a92c468043d781e53e361bdf7cf5fd7e5db39f028955849d35f28acd2136c249efd1f492a14601c87c177f93f27ebcffd0c575bc9ff0bcfe2cbb475b379b2449a9595bed412c66189b36e0f7afad7ca395850250789ef3bdd17a14478a311dcbe3b7c00d101b592e43fe8e5cb4972ff961859ed3348443ecce4696e5f50f73e5b3f6c09355b46a2b087865c398191561efa01941a0be1d43a51dca386c353db53a0a00c2cb9e170f6e09f356a5259c4306ba0a3b967c0d95750bb8bb3a924d3bac8b5c294e0d41442bc4c4f48a2ae620f698aa6202225e032f65a259eab344608949a8a7998b1d204cc680a593505e1a87d33cacb2eb29e04e64dd7ee245bfc986a7ac5fc7746d267b847540a1b67d689465815b61fcefcce896e8af146ea03e7d328aa4315de10a3c60bd93ff8aa7e01fca550bad308af2c08908c16d415b578865538696b7f9e571d59d6662426fc24d25cac382de4c0235a8c7c7e90f46cb33d42014705dbf5254cc138d0a2a08a2fd4bc4ad9812143fddecb90a206efc0b3ea541562f0df18bc3530cb633985cd759bcde9972aaab1a78e5bac8f99b3f3bf207231691c7a4ba0e3115f38b7649d10a47ac7fc038cd46caed39a636eb6c0ec13a277180206fcf2060cfe29dfd391e3a352970f1f91d564a46725b726da6567d07627a3363017323a108a4c8b969c08ede46da82f9d3d28a59fedb6f76e3ebc4ddd2df1040f01a786c331acbd282cb58d2fc2ffea5836d8c36f01939754d47bf3b0e4fe51560fbd86c7d252c3fe94e0b1f2102e06171e4f67988a9aa08d168b987a8e409a390021a18960a67ce60753358982593a177c95c84f6be9e398c18fe83a60e9b04b37a48518844cdd68da47ed2e6b969f4eaf554df9944b3cc73e874f1de75e399d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xb8, 0x1a, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, {0x6a, 0x6, "50dee437a5d49621372d5b64c69f75fd091027d8a5d4ed93c99e3a44b29e0769d0b897913a593c3c19d39aceadacd0ab4e796e164fb23c778fb671f614b35e0c42f0623e78f6d0a8b24cd409989baed06d5e613b57ae61758646035fe334a9623f5a49cade7e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 12m6.315613221s ago: executing program 7 (id=2114): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000240)={0x3}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) sendfile(r0, r0, 0x0, 0x40008) 12m2.37647904s ago: executing program 7 (id=2121): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000940)={{}, {0x0, 0xfd}, 0x800, 0x0, 0x40}) 12m1.536620183s ago: executing program 7 (id=2123): syz_open_dev$cec(0x0, 0x0, 0x210380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 11m59.621313656s ago: executing program 7 (id=2126): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="d8f20e49aff98a98d85257bf91bc026308549195d3b348e50406d3e3894454fd0ea59a06a6328682c321a20ae1b9efcbb85b3f79c3693ad863f524d1f94767a74e5ca52a8be59a80619fead9506f925053c33010506bfb2e263a83756a83681d30d24d612d1c", 0x66}, {&(0x7f0000000ec0)="69536f8688855f33", 0x8}], 0x2}}], 0x1, 0x40000) connect$unix(r4, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000200)={r8, r9, r10, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) unshare(0x62040200) 11m43.241324108s ago: executing program 46 (id=2126): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e40)="d8f20e49aff98a98d85257bf91bc026308549195d3b348e50406d3e3894454fd0ea59a06a6328682c321a20ae1b9efcbb85b3f79c3693ad863f524d1f94767a74e5ca52a8be59a80619fead9506f925053c33010506bfb2e263a83756a83681d30d24d612d1c", 0x66}, {&(0x7f0000000ec0)="69536f8688855f33", 0x8}], 0x2}}], 0x1, 0x40000) connect$unix(r4, 0x0, 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r7 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000003c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f0000000200)={r8, r9, r10, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) unshare(0x62040200) 6m49.484857498s ago: executing program 0 (id=2887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 6m48.93089808s ago: executing program 0 (id=2890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 6m47.516689525s ago: executing program 0 (id=2894): r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={{0x14}, [], {0x14}}, 0x28}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000640), &(0x7f0000000680)=0xc) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) setpgid(0x0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x20040840) close_range(r0, r1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r6, 0x0, 0x83, &(0x7f0000000580)={'broute\x00', 0x0, 0x3, 0xab, [0xffffff43, 0x3, 0x4, 0x8, 0x5fe, 0x9], 0x0, 0x0, &(0x7f0000000440)=""/171}, &(0x7f0000000600)=0x50) 6m46.146649159s ago: executing program 0 (id=2897): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000002180100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)=""/27, 0x1b}, {&(0x7f0000000100)=""/30, 0x1e}], 0x2}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, 0x0) socket$kcm(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m44.772901072s ago: executing program 0 (id=2900): mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc03, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$vim2m(0x0, 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) syz_emit_vhci(&(0x7f0000000e40)=ANY=[@ANYBLOB="04040a00000000000000000002"], 0xd) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) 6m44.486638977s ago: executing program 0 (id=2903): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x62b80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) unshare(0x6a040000) unshare(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 6m29.247746977s ago: executing program 47 (id=2903): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x62b80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) unshare(0x6a040000) unshare(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 3m59.095782309s ago: executing program 5 (id=3271): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="1b10284938c218a739ce2f69368a687b9044ece253e2951c9db306fbebabae05", 0x20}], 0x1, 0x0, 0x0, 0x40041}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 3m57.411835508s ago: executing program 5 (id=3275): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0) 3m54.109540791s ago: executing program 5 (id=3279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.984014949s ago: executing program 5 (id=3284): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800f3d200000000000000000200000000000007000000002800168024813de72c89fe22b10000000000040000000000200100000000000000000000000000010600150005"], 0x4c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xa00, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 3m49.698350132s ago: executing program 5 (id=3287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="1b10284938c218a739ce2f69368a687b9044ece253e2951c9db306fbebabae05", 0x20}], 0x1, 0x0, 0x0, 0x40041}], 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 3m47.340519877s ago: executing program 5 (id=3290): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000005c00)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="046c54eb084ada86d47cb164b7036d62c0b97da0ecd6abb3a9cf41ff6506fba43fd37f7a0ba036d23db9c235d855582e798bf937e0bb0bff689d3b4ae3286ee110b623e0255c7608c1ab9df43437cb63db290bc98d87cbe69d80a7155230548531a54f2a9f4b9680695da4b9c3d564c405ae4bc23e4d83e65aae49d4676d30698c43c444b1f131b012eb125731905a1ef8d16d2edeb58b85ef174b0f21d6b4a1d2b76fc17631d40c536dd9e250fb388ee8de2829876d59842d742d8e3b066151e252f1e2d9fc3fb4f9c2389d4b3fc28ec208fd507b8311f55dd97c7ba0d06ab3727744335003a08d386218bb5a82"], 0xfe, 0x5953, &(0x7f0000000280)="$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") bind$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x80000000c) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x16082, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) open(0x0, 0x60142, 0x0) open(0x0, 0x185102, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0x15, 0x17, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f04c3902dd8f6fac274de9d940bba5e50392bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ee68d347f41be5a08", [0xf20, 0x7]}) 3m31.504570164s ago: executing program 48 (id=3290): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000005c00)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="046c54eb084ada86d47cb164b7036d62c0b97da0ecd6abb3a9cf41ff6506fba43fd37f7a0ba036d23db9c235d855582e798bf937e0bb0bff689d3b4ae3286ee110b623e0255c7608c1ab9df43437cb63db290bc98d87cbe69d80a7155230548531a54f2a9f4b9680695da4b9c3d564c405ae4bc23e4d83e65aae49d4676d30698c43c444b1f131b012eb125731905a1ef8d16d2edeb58b85ef174b0f21d6b4a1d2b76fc17631d40c536dd9e250fb388ee8de2829876d59842d742d8e3b066151e252f1e2d9fc3fb4f9c2389d4b3fc28ec208fd507b8311f55dd97c7ba0d06ab3727744335003a08d386218bb5a82"], 0xfe, 0x5953, &(0x7f0000000280)="$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") bind$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x80000000c) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x16082, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@partition={'partition', 0x3d, 0x6}}, {@gid_forget}, {@session={'session', 0x3d, 0xfe8}}, {@noadinicb}, {@anchor}, {@uid_forget}]}, 0xfe, 0xc24, &(0x7f0000001480)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) open(0x0, 0x60142, 0x0) open(0x0, 0x185102, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0x15, 0x17, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f04c3902dd8f6fac274de9d940bba5e50392bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ee68d347f41be5a08", [0xf20, 0x7]}) 3m8.885220482s ago: executing program 4 (id=3389): syz_open_dev$cec(0x0, 0x0, 0x210380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3m8.143373037s ago: executing program 4 (id=3394): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 3m4.787135269s ago: executing program 4 (id=3400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) creat(0x0, 0x81) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3m3.192769659s ago: executing program 4 (id=3407): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000000)={[{@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@utf8}, {@uni_xlate}, {@shortname_mixed}]}, 0x1, 0x239, &(0x7f0000000b80)="$eJzs2k2LW1UYB/DnTiutU6YZ8Y0WxIMufFlcOlm76CAtiAOKNkIVpLfOjYZckyE3DkTEzkq3fgTX4tKdIF26mY2fwIW72cyyi+KVTjp2UkbwhU4G5/fb5Akn/+Q5nHDyLLLz2jef9rt13i3GsZBlsXA5tuJOFsuxEPu24pWXrv/83LvX339zdW3tyjspXV29ttJOKZ1//qcPvvj+hdvjc+/9cP7HM7G9/OHObvu37We2L+z8fu2TXp16dRoMx6lIN4fDcXGzKtN6r+7nKb1dlUVdpt6gLkcz691quLExScVgfWlxY1TWdSoGk9QvJ2k8TOPRJBUfF71ByvM8LS0G/0XnuztNE7vNYzeiaZrHv41zt2Pp12hF9kTKnrycPX0je3Yru7DbNK15t8oj4fxPtgOX+tmI6uvNzmZn+jhdX+1GL6oo41K04m7c+5rcN62vvrF25VLasxxfVbfu529tdk7N5leiFcuH51em+TSbPxOLB/PtaMVT+79Js/n2ofmz8fKLB/J5tOKXj2IYVazvvcOD/JcrKb3+1tpD+Yt7rwMA+L/J058Ond/y/K/Wp/l/MB8+NF+djoun57t3IurJ5/2iqsrRIy8W/9Vn7U/8R9Gh4ngXd49HGyekmPPFxJF4cOj3np1qf/bqvDsCAAAAAAAAAADg7ziKvxPOe48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx9kcAAAD//6CczOc=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0xe2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000020c0)='./bus\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000b40)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f6368617273ff000000000000002c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 3m1.093983481s ago: executing program 4 (id=3412): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f, @void, @value}, 0x94) 2m58.587357904s ago: executing program 4 (id=3425): syz_open_dev$vim2m(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 2m56.210457123s ago: executing program 49 (id=3425): syz_open_dev$vim2m(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r0 = socket$inet(0x2, 0x5, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 35.945415465s ago: executing program 8 (id=3726): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0xb, 0x2, 0x0, &(0x7f00000003c0)) 34.380893764s ago: executing program 8 (id=3731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ipvs(0xffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x3, 0x1) syz_emit_vhci(0x0, 0x0) 32.690329355s ago: executing program 8 (id=3735): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) close_range(r0, 0xffffffffffffffff, 0x0) 31.870679048s ago: executing program 8 (id=3740): sched_setaffinity(0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r3, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='gretap\x00', &(0x7f00000001c0)='gretap\x00', 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$nl_rdma(0x10, 0x3, 0x14) 27.982644121s ago: executing program 8 (id=3749): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1, 0x40000100, 0x0) 27.244890947s ago: executing program 8 (id=3751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) 10.022124394s ago: executing program 9 (id=3804): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./control\x00', 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0xd931d3864d39dcce) rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.115964322s ago: executing program 9 (id=3810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, r0, 0xffff}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f809d3af1ed2a674fa5000f000000e8bd6e", 0x1b}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1410, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x146c) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ext2\x00', 0x0, &(0x7f0000000140)='grpquota') 8.552517509s ago: executing program 2 (id=3813): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xaf) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="8944", 0x2, 0xfffffffffffffffd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 5.716505346s ago: executing program 2 (id=3815): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) 5.438571834s ago: executing program 2 (id=3816): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000080)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x3, 0x0, {0x0, 0xf5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x2000081) 5.132815697s ago: executing program 2 (id=3818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0xfffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa4fb, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x95, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x6, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x10, 0x80007, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x531, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x5, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 4.982450628s ago: executing program 3 (id=3819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c702a83b4e2c6d42bac509bb61603783667f4af91eb3b9cfa4eeb06d4aa5c05e48b51e143c50256f9500866d2abb5ad49d65869cef56edd0f8d76af4035859583e756da45b432d606a72e43c202565388f843619e08fd0876e0973438b3f4df68bddf77ce3950c739f4c947605ed5f0b52e08fd5e72dc6864278ef87ceb0b612ff28f97c2d5c2c0eaf149a2f3edd9a70a2e1c04b19484870354f63c6a81db93033f32fc8a91c13b49ef4db855568cf28774e23ea55d688ebc68c6c587d130fc4ea56edcf7497554f6685cb9ed8533f45f2", 0xef, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.798887233s ago: executing program 3 (id=3820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf23, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) unshare(0x20000400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000180)={&(0x7f0000000240)={0x1d, r6}, 0x10, &(0x7f00000002c0)={&(0x7f0000000400)={0x1, 0x688, 0xf, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "03840be9b81be3a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) fcntl$lock(r4, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r4, 0x26, &(0x7f00000031c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000c00)={[{@auto_da_alloc}, {@noblock_validity}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0xe, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 4.37264974s ago: executing program 9 (id=3821): syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x71, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) 4.364448206s ago: executing program 6 (id=3822): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000001200)={0xa, 0x0, 0x20000000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='|', 0x1}], 0x1}}], 0x1, 0xc084) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.194228413s ago: executing program 1 (id=3823): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 4.193282453s ago: executing program 2 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1, 0x40000100, 0x0) 4.069156733s ago: executing program 6 (id=3825): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x21, 0x1f1, &(0x7f0000000780)="$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") open(0x0, 0x0, 0x0) 3.734722804s ago: executing program 6 (id=3826): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x121081e, &(0x7f00000002c0), 0x0, 0x4f2, &(0x7f0000000600)="$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") 3.313695529s ago: executing program 1 (id=3827): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.996710052s ago: executing program 3 (id=3828): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73e, &(0x7f0000000800)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001180)=ANY=[]) 2.987245507s ago: executing program 1 (id=3829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 2.879293684s ago: executing program 2 (id=3830): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0xe, 0x7, "c0ae0d4e995595"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.875207117s ago: executing program 6 (id=3831): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800"], 0x2c}}, 0x0) 2.396682001s ago: executing program 1 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000300)={0xffffffffffffffff, r0, 0xffff}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f809d3af1ed2a674fa5000f000000e8bd6e", 0x1b}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1410, 0x1280, 0x150, 0x150, 0x0, 0xf8010000, 0x1348, 0x238, 0x238, 0x1348, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1218, 0x1280, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@inet=@sctp={{0x144}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000], 0x6, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x146c) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='ext2\x00', 0x0, &(0x7f0000000140)='grpquota') 2.296473766s ago: executing program 3 (id=3833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000000c0)}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 1.207163912s ago: executing program 3 (id=3834): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@debug}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x3000, 0x9, 0x1, 0x10000, 0x1ff}}, 0x118) 976.950295ms ago: executing program 9 (id=3835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) fadvise64(r3, 0x6, 0xb, 0x4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x721, 0x0, 0x0, &(0x7f00000011c0), &(0x7f0000001240)={0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000100)={0x0, 0x0, 0x1029, 0x1009, ""/4105}, &(0x7f0000000080)=0x1029, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)="dc6c5e66c1bbea28ba66f2c0d1618632d27a4cdbf4353d18cb076f0575c227aae88dd7198c8fc081e629", 0x2a}, 0x1, 0x0, 0x0, 0x4800}, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 824.779914ms ago: executing program 1 (id=3836): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000001200)={0xa, 0x0, 0x20000000, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='|', 0x1}], 0x1}}], 0x1, 0xc084) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000000000000000", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 641.299121ms ago: executing program 6 (id=3837): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="005901e3fd18fb9c322293c67dcde48bfeffd1843c336e09b34af65ad26aafded7da5cfeeda2b8d8d900c2195f00f646f699eeb47813177405a6a6baf786c0d14f2079a9efa9db8973bcca25eb2973856c6760a483c41d0980c78a4cb096a5affa6b980600000000000000a1eacd2c820176737d4eb55dca564820dd769d8742f6d9ab243775a67afcdf845f978e95365cdf6f30aa43423b381881433e00ccbe6353b21300d8f0ca972589398eef9487db78486fcf174990c488031f8b39cc01bb509f3ea4bcde33d4c9e305ecb4dd88204c5d7bb5e469cabfda0feca3ce70c0acbc34d13e5a5c796eab23abfe3b717834f8e9d7120e1e925c4e210b4152c75210b3e979fbe8ddf23eef2d53733209b22206e0a4afc354c33d7ca2a00116a14d686e4aa86b6ec6a4130178c3ad8c723c0d8506bd7bff780000000000000000004b2ec61cfde813cc124715aaaf5508b93d8cf0860042108b660b74f94b1e4851eeec09fdb7a617eabeeeff8ce8bb99f4b1f9c2896cf31e19c3c24155b0ea7dc3cae1b56acb1946830cad94af3f1caf43ea03b38fc08a7e19480e283a4c0d", @ANYRES64=0x0, @ANYRES16=0x0, @ANYRESHEX, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESOCT=0x0], 0x21, 0x1f1, &(0x7f0000000780)="$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") open(0x0, 0x0, 0x0) 464.788459ms ago: executing program 9 (id=3838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2, 0x1}}, 0x40) 432.333393ms ago: executing program 1 (id=3839): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000040085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfe00, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9a02fff0}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) 180.463097ms ago: executing program 6 (id=3840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r1, 0x1, 0xfffffffe}, 0x1c}}, 0x0) 92.795667ms ago: executing program 9 (id=3841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/106, 0x6a}], 0x1, 0x40000100, 0x0) 0s ago: executing program 3 (id=3842): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): (loop5): journal_replay... [ 1517.610970][T21352] XFS (loop3): Ending clean mount [ 1517.703623][T21363] loop6: detected capacity change from 0 to 32768 [ 1517.742770][T21363] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3310 (21363) [ 1517.805483][T21363] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1517.838147][T21363] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 1517.860767][T21363] BTRFS info (device loop6): disk space caching is enabled [ 1517.909415][T21363] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1517.940708][T21234] done [ 1517.951980][T21234] bcachefs (loop5): check_alloc_info... done [ 1518.028396][T16649] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1518.051292][T21234] bcachefs (loop5): check_lrus... done [ 1518.093223][T21234] bcachefs (loop5): check_btree_backpointers... done [ 1518.146803][T21378] loop8: detected capacity change from 0 to 32768 [ 1518.180166][T21234] bcachefs (loop5): check_backpointers_to_extents... done [ 1518.327413][T21363] BTRFS info (device loop6): rebuilding free space tree [ 1518.386911][T21234] bcachefs (loop5): check_extents_to_backpointers... [ 1518.442307][T21234] bcachefs (loop5): scanning for missing backpointers in 7/128 buckets [ 1518.841166][T21378] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1518.882708][T21234] done [ 1519.005314][T21363] BTRFS info (device loop6): disabling free space tree [ 1519.060014][T21363] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1519.081419][T21363] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1519.118400][T21234] bcachefs (loop5): check_alloc_to_lru_refs... [ 1519.121606][T21234] missing fragmentation lru entry [ 1519.121640][T21234] u64s 13 type alloc_v4 0:27:0 len 0 ver 0: [ 1519.121657][T21234] gen 0 oldest_gen 0 data_type btree [ 1519.121675][T21234] journal_seq_nonempty 4 [ 1519.121690][T21234] journal_seq_empty 0 [ 1519.121705][T21234] need_discard 1 [ 1519.121720][T21234] need_inc_gen 1 [ 1519.121736][T21234] dirty_sectors 32 [ 1519.121751][T21234] stripe_sectors 0 [ 1519.121767][T21234] cached_sectors 0 [ 1519.121782][T21234] stripe 0 [ 1519.121797][T21234] stripe_redundancy 0 [ 1519.121813][T21234] io_time[READ] 1 [ 1519.121873][T21234] io_time[WRITE] 256 [ 1519.121897][T21234] fragmentation 268435456 [ 1519.121923][T21234] bp_start 8 [ 1519.121940][T21234] , fixing [ 1519.391844][ T7265] ocfs2: Unmounting device (7,8) on (node local) [ 1519.436191][ T9306] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1519.606186][T21234] missing fragmentation lru entry [ 1519.606213][T21234] u64s 13 type alloc_v4 0:31:0 len 0 ver 0: [ 1519.606236][T21234] gen 0 oldest_gen 0 data_type btree [ 1519.606257][T21234] journal_seq_nonempty 4 [ 1519.606277][T21234] journal_seq_empty 0 [ 1519.606296][T21234] need_discard 1 [ 1519.606316][T21234] need_inc_gen 1 [ 1519.606336][T21234] dirty_sectors 32 [ 1519.606355][T21234] stripe_sectors 0 [ 1519.606375][T21234] cached_sectors 0 [ 1519.606394][T21234] stripe 0 [ 1519.606413][T21234] stripe_redundancy 0 [ 1519.606433][T21234] io_time[READ] 1 [ 1519.606452][T21234] io_time[WRITE] 512 [ 1519.606472][T21234] fragmentation 268435456 [ 1519.606492][T21234] bp_start 8 [ 1519.606512][T21234] , fixing [ 1520.160934][T21446] "syz.1.3319" (21446) uses obsolete ecb(arc4) skcipher [ 1520.173794][T21446] 9pnet_virtio: no channels available for device syz [ 1520.834588][T21234] missing fragmentation lru entry [ 1520.834615][T21234] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 1520.834639][T21234] gen 0 oldest_gen 0 data_type btree [ 1520.834660][T21234] journal_seq_nonempty 1 [ 1520.834680][T21234] journal_seq_empty 0 [ 1520.834700][T21234] need_discard 1 [ 1520.834719][T21234] need_inc_gen 1 [ 1520.834740][T21234] dirty_sectors 32 [ 1520.834760][T21234] stripe_sectors 0 [ 1520.834779][T21234] cached_sectors 0 [ 1520.834800][T21234] stripe 0 [ 1520.834819][T21234] stripe_redundancy 0 [ 1520.834839][T21234] io_time[READ] 1 [ 1520.834859][T21234] io_time[WRITE] 1 [ 1520.834879][T21234] fragmentation 268435456 [ 1520.834899][T21234] bp_start 8 [ 1520.834919][T21234] , fixing [ 1521.895969][T21460] netlink: 'syz.8.3317': attribute type 1 has an invalid length. [ 1521.896002][T21460] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3317'. [ 1521.949809][T21234] missing fragmentation lru entry [ 1521.949927][T21234] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 1521.949951][T21234] gen 0 oldest_gen 0 data_type btree [ 1521.949972][T21234] journal_seq_nonempty 0 [ 1521.949991][T21234] journal_seq_empty 0 [ 1521.950011][T21234] need_discard 0 [ 1521.950030][T21234] need_inc_gen 0 [ 1521.950050][T21234] dirty_sectors 32 [ 1521.950069][T21234] stripe_sectors 0 [ 1521.950088][T21234] cached_sectors 0 [ 1521.950108][T21234] stripe 0 [ 1521.950128][T21234] stripe_redundancy 0 [ 1521.950155][T21234] io_time[READ] 0 [ 1521.950174][T21234] io_time[WRITE] 0 [ 1521.950194][T21234] fragmentation 268435456 [ 1521.950214][T21234] bp_start 8 [ 1521.950233][T21234] , fixing [ 1522.356868][T21234] missing fragmentation lru entry [ 1522.356895][T21234] u64s 13 type alloc_v4 0:38:0 len 0 ver 0: [ 1522.356917][T21234] gen 0 oldest_gen 0 data_type btree [ 1522.356938][T21234] journal_seq_nonempty 0 [ 1522.356957][T21234] journal_seq_empty 0 [ 1522.356976][T21234] need_discard 0 [ 1522.356995][T21234] need_inc_gen 0 [ 1522.357014][T21234] dirty_sectors 32 [ 1522.357033][T21234] stripe_sectors 0 [ 1522.357052][T21234] cached_sectors 0 [ 1522.357072][T21234] stripe 0 [ 1522.357095][T21234] stripe_redundancy 0 [ 1522.357115][T21234] io_time[READ] 0 [ 1522.357139][T21234] io_time[WRITE] 0 [ 1522.357160][T21234] fragmentation 268435456 [ 1522.357179][T21234] bp_start 8 [ 1522.357199][T21234] , fixing [ 1522.776001][T21469] loop6: detected capacity change from 0 to 32768 [ 1522.850407][T21234] missing fragmentation lru entry [ 1522.850434][T21234] u64s 13 type alloc_v4 0:42:0 len 0 ver 0: [ 1522.850457][T21234] gen 0 oldest_gen 0 data_type btree [ 1522.850477][T21234] journal_seq_nonempty 7 [ 1522.850497][T21234] journal_seq_empty 0 [ 1522.850516][T21234] need_discard 1 [ 1522.850535][T21234] need_inc_gen 1 [ 1522.850555][T21234] dirty_sectors 32 [ 1522.850574][T21234] stripe_sectors 0 [ 1522.850594][T21234] cached_sectors 0 [ 1522.850613][T21234] stripe 0 [ 1522.850633][T21234] stripe_redundancy 0 [ 1522.850653][T21234] io_time[READ] 1 [ 1522.850674][T21234] io_time[WRITE] 1280 [ 1522.850693][T21234] fragmentation 268435456 [ 1522.850713][T21234] bp_start 8 [ 1522.850732][T21234] , fixing [ 1522.943026][T21469] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 1522.943108][T21469] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 1523.075624][T21469] bcachefs: bch2_fs_get_tree() error: EINVAL [ 1523.326748][T21469] overlayfs: missing 'lowerdir' [ 1523.380462][T21234] done [ 1523.406356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1523.440270][T21234] bcachefs (loop5): bucket_gens_init... done [ 1523.476335][T21234] bcachefs (loop5): check_snapshot_trees... done [ 1523.551126][T21234] bcachefs (loop5): check_snapshots... [ 1523.551793][T21234] snapshot points to missing/incorrect tree: [ 1523.551820][T21234] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 1523.698318][T21234] snapshot points to missing/incorrect tree: [ 1523.698367][T21234] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: is_subvol 1 deleted 0 parent 0 children 0 0 subvol 1 tree 0, fixing [ 1523.817247][T21234] done [ 1523.969475][T21234] bcachefs (loop5): check_subvols... done [ 1524.032045][T21234] bcachefs (loop5): check_subvol_children... done [ 1524.063960][T21234] bcachefs (loop5): delete_dead_snapshots... done [ 1524.094974][T21234] bcachefs (loop5): check_inodes... [ 1524.096398][T21234] inode points to missing dirent [ 1524.096424][T21234] inum: 4098:4294967295 [ 1524.096444][T21234] mode=40755 [ 1524.096462][T21234] flags=(15300000) [ 1524.096481][T21234] journal_seq=4 [ 1524.096500][T21234] hash_seed=ece93825deac2443 [ 1524.096520][T21234] hash_type=siphash [ 1524.096539][T21234] bi_size=12666373951979520 [ 1524.096559][T21234] bi_sectors=0 [ 1524.096577][T21234] bi_version=0 [ 1524.096596][T21234] bi_atime=2770562249 [ 1524.096615][T21234] bi_ctime=2780562352 [ 1524.096635][T21234] bi_mtime=2780562352 [ 1524.096653][T21234] bi_otime=2770562249 [ 1524.103629][T21234] bi_uid=0 [ 1524.103657][T21234] bi_gid=0 [ 1524.103675][T21234] bi_nlink=0 [ 1524.103693][T21234] bi_generation=0 [ 1524.103712][T21234] bi_dev=0 [ 1524.103730][T21234] bi_data_checksum=0 [ 1524.103749][T21234] bi_compression=0 [ 1524.103768][T21234] bi_project=0 [ 1524.103788][T21234] bi_background_compression=0 [ 1524.103808][T21234] bi_data_replicas=0 [ 1524.103827][T21234] bi_promote_target=0 [ 1524.103847][T21234] bi_foreground_target=0 [ 1524.103867][T21234] bi_background_target=0 [ 1524.103887][T21234] bi_erasure_code=0 [ 1524.103906][T21234] bi_fields_set=0 [ 1524.103924][T21234] bi_dir=4096 [ 1524.103943][T21234] bi_dir_offset=189491840996961599 [ 1524.103964][T21234] bi_subvol=0 [ 1524.103982][T21234] bi_parent_subvol=0 [ 1524.104002][T21234] bi_nocow=0 [ 1524.104020][T21234] bi_depth=0 [ 1524.104039][T21234] bi_inodes_32bit=0, fixing [ 1525.159598][T21473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3323'. [ 1525.168748][T21473] tipc: New replicast peer: 255.255.255.255 [ 1525.169119][T21473] tipc: Enabled bearer , priority 10 [ 1525.356779][T21507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.191669][T21514] loop2: detected capacity change from 0 to 512 [ 1526.258559][T21514] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1526.403794][T21443] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1526.406579][T21443] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1526.416810][T21443] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1526.431691][T21443] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1526.446861][T21443] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1526.450156][T21443] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1526.586608][T21522] loop6: detected capacity change from 0 to 512 [ 1526.630904][T21516] lo speed is unknown, defaulting to 1000 [ 1526.644782][T21522] EXT4-fs: Ignoring removed i_version option [ 1526.723765][T21522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.723895][T21522] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1526.799603][T21522] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3331: corrupted inode contents [ 1526.868341][T21522] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #4: comm syz.6.3331: mark_inode_dirty error [ 1526.897960][T21516] wg1 speed is unknown, defaulting to 1000 [ 1526.898272][T21522] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3331: corrupted inode contents [ 1526.904746][T21522] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.3331: mark_inode_dirty error [ 1526.940714][T21522] Quota error (device loop6): write_blk: dquota write failed [ 1526.940838][T21522] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 1526.941439][T21522] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1526.941492][T21522] EXT4-fs error (device loop6): ext4_acquire_dquot:6925: comm syz.6.3331: Failed to acquire dquot type 1 [ 1527.050723][T21522] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3331: corrupted inode contents [ 1527.067793][T21522] EXT4-fs error (device loop6): ext4_dirty_inode:6042: inode #4: comm syz.6.3331: mark_inode_dirty error [ 1527.068443][T21522] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #4: comm syz.6.3331: corrupted inode contents [ 1527.068844][T21522] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #4: comm syz.6.3331: mark_inode_dirty error [ 1527.079968][T21522] Quota error (device loop6): write_blk: dquota write failed [ 1527.080052][T21522] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1527.082427][T21522] EXT4-fs error (device loop6): ext4_acquire_dquot:6925: comm syz.6.3331: Failed to acquire dquot type 1 [ 1527.383307][T21516] chnl_net:caif_netlink_parms(): no params data found [ 1527.433764][ T9306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.529574][T21544] loop1: detected capacity change from 0 to 8 [ 1527.632836][T21496] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1527.645191][T21234] inode points to missing dirent [ 1527.645215][T21234] inum: 4099:4294967295 [ 1527.645234][T21234] mode=100755 [ 1527.645251][T21234] flags=(15300000) [ 1527.645270][T21234] journal_seq=5 [ 1527.645289][T21234] hash_seed=fc917866faeb7b5b [ 1527.645309][T21234] hash_type=siphash [ 1527.645329][T21234] bi_size=1050 [ 1527.645347][T21234] bi_sectors=8 [ 1527.645365][T21234] bi_version=0 [ 1527.645384][T21234] bi_atime=2770562249 [ 1527.645403][T21234] bi_ctime=2770562249 [ 1527.645423][T21234] bi_mtime=2770562249 [ 1527.645442][T21234] bi_otime=2770562249 [ 1527.645462][T21234] bi_uid=0 [ 1527.645484][T21234] bi_gid=0 [ 1527.645502][T21234] bi_nlink=0 [ 1527.645520][T21234] bi_generation=0 [ 1527.645539][T21234] bi_dev=0 [ 1527.645557][T21234] bi_data_checksum=0 [ 1527.645576][T21234] bi_compression=0 [ 1527.645595][T21234] bi_project=0 [ 1527.645613][T21234] bi_background_compression=0 [ 1527.645633][T21234] bi_data_replicas=0 [ 1527.645653][T21234] bi_promote_target=0 [ 1527.645672][T21234] bi_foreground_target=0 [ 1527.645692][T21234] bi_background_target=0 [ 1527.645712][T21234] bi_erasure_code=0 [ 1527.645731][T21234] bi_fields_set=0 [ 1527.645750][T21234] bi_dir=32 [ 1527.645768][T21234] bi_dir_offset=8977922886548783724 [ 1527.645789][T21234] bi_subvol=0 [ 1527.645808][T21234] bi_parent_subvol=0 [ 1527.645827][T21234] bi_nocow=0 [ 1527.645845][T21234] bi_depth=0 [ 1527.645864][T21234] bi_inodes_32bit=0, fixing [ 1527.746962][T21544] SQUASHFS error: xz decompression failed, data probably corrupt [ 1527.747053][T21544] SQUASHFS error: Failed to read block 0x60: -5 [ 1527.790507][T21544] SQUASHFS error: xz decompression failed, data probably corrupt [ 1527.960735][T21234] inode points to missing dirent [ 1527.960763][T21234] inum: 4100:4294967295 [ 1527.960783][T21234] mode=120777 [ 1527.960801][T21234] flags=(15300000) [ 1527.960820][T21234] journal_seq=4 [ 1527.960838][T21234] hash_seed=f4891abdd5c0cd85 [ 1527.960858][T21234] hash_type=siphash [ 1527.960877][T21234] bi_size=38 [ 1527.960893][T21234] bi_sectors=8 [ 1527.960909][T21234] bi_version=0 [ 1527.960924][T21234] bi_atime=2770562249 [ 1527.960941][T21234] bi_ctime=2780562352 [ 1527.960957][T21234] bi_mtime=2770562249 [ 1527.960974][T21234] bi_otime=2770562249 [ 1527.960991][T21234] bi_uid=0 [ 1527.961006][T21234] bi_gid=0 [ 1527.961022][T21234] bi_nlink=0 [ 1527.961037][T21234] bi_generation=0 [ 1527.961053][T21234] bi_dev=0 [ 1527.961068][T21234] bi_data_checksum=0 [ 1527.961084][T21234] bi_compression=0 [ 1527.961100][T21234] bi_project=0 [ 1527.961116][T21234] bi_background_compression=0 [ 1527.961134][T21234] bi_data_replicas=0 [ 1527.961150][T21234] bi_promote_target=0 [ 1527.961166][T21234] bi_foreground_target=0 [ 1527.961183][T21234] bi_background_target=0 [ 1527.961201][T21234] bi_erasure_code=0 [ 1527.961217][T21234] bi_fields_set=0 [ 1527.961242][T21234] bi_dir=4098 [ 1527.961259][T21234] bi_dir_offset=5675548428000973578 [ 1527.961277][T21234] bi_subvol=0 [ 1527.961293][T21234] bi_parent_subvol=0 [ 1527.961309][T21234] bi_nocow=0 [ 1527.961326][T21234] bi_depth=0 [ 1527.961341][T21234] bi_inodes_32bit=0, fixing [ 1528.051246][T21544] SQUASHFS error: Failed to read block 0x60: -5 [ 1528.051671][ T30] audit: type=1800 audit(1742862871.728:765): pid=21544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3333" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 1528.129762][T21516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.133083][T21516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.133242][T21516] bridge_slave_0: entered allmulticast mode [ 1528.137582][T21516] bridge_slave_0: entered promiscuous mode [ 1528.175923][T21516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.175998][T21516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.176148][T21516] bridge_slave_1: entered allmulticast mode [ 1528.177344][T21516] bridge_slave_1: entered promiscuous mode [ 1528.329626][T21516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.333840][T21516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.491729][T21443] Bluetooth: hci3: command tx timeout [ 1528.508350][T21520] loop2: detected capacity change from 0 to 32768 [ 1528.558087][T21516] team0: Port device team_slave_0 added [ 1528.588854][T21516] team0: Port device team_slave_1 added [ 1528.821694][T21516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.920282][T21234] inode points to missing dirent [ 1528.920308][T21234] inum: 4100:4294967295 [ 1528.920327][T21234] mode=120777 [ 1528.920346][T21234] flags=(15300000) [ 1528.920365][T21234] journal_seq=4 [ 1528.920384][T21234] hash_seed=f4891abdd5c0cd85 [ 1528.920413][T21234] hash_type=siphash [ 1528.920432][T21234] bi_size=38 [ 1528.920451][T21234] bi_sectors=8 [ 1528.920470][T21234] bi_version=0 [ 1528.920488][T21234] bi_atime=2770562249 [ 1528.920508][T21234] bi_ctime=2780562352 [ 1528.920526][T21234] bi_mtime=2770562249 [ 1528.920546][T21234] bi_otime=2770562249 [ 1528.920565][T21234] bi_uid=0 [ 1528.920583][T21234] bi_gid=0 [ 1528.920600][T21234] bi_nlink=0 [ 1528.920619][T21234] bi_generation=0 [ 1528.920638][T21234] bi_dev=0 [ 1528.920656][T21234] bi_data_checksum=0 [ 1528.920675][T21234] bi_compression=0 [ 1528.920694][T21234] bi_project=0 [ 1528.920713][T21234] bi_background_compression=0 [ 1528.920733][T21234] bi_data_replicas=0 [ 1528.920752][T21234] bi_promote_target=0 [ 1528.920772][T21234] bi_foreground_target=0 [ 1528.920791][T21234] bi_background_target=0 [ 1528.920811][T21234] bi_erasure_code=0 [ 1528.920830][T21234] bi_fields_set=0 [ 1528.920849][T21234] bi_dir=4098 [ 1528.920868][T21234] bi_dir_offset=5675548428000973578 [ 1528.920889][T21234] bi_subvol=0 [ 1528.920908][T21234] bi_parent_subvol=0 [ 1528.920927][T21234] bi_nocow=0 [ 1528.920945][T21234] bi_depth=0 [ 1528.920963][T21234] bi_inodes_32bit=0, fixing [ 1529.068752][T21516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.068807][T21516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.069973][T21577] netlink: 'syz.6.3336': attribute type 1 has an invalid length. [ 1529.070003][T21577] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1529.075736][T21516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.075835][T21516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.075883][T21516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.469537][T21516] hsr_slave_0: entered promiscuous mode [ 1529.697310][T21516] hsr_slave_1: entered promiscuous mode [ 1529.697737][T21516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.697764][T21516] Cannot create hsr debugfs directory [ 1529.881172][T21558] loop8: detected capacity change from 0 to 32768 [ 1529.896112][T21558] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3335 (21558) [ 1529.962174][T21558] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1529.962273][T21558] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm [ 1529.962323][T21558] BTRFS info (device loop8): using free-space-tree [ 1530.580876][T21186] Bluetooth: hci3: command tx timeout [ 1530.671104][T21592] block nbd3: shutting down sockets [ 1530.999099][T21586] loop2: detected capacity change from 0 to 32768 [ 1531.050947][T21586] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3338 (21586) [ 1531.070447][T21586] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1531.070547][T21586] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1531.070597][T21586] BTRFS info (device loop2): using free-space-tree [ 1531.257758][T21586] BTRFS info (device loop2): rebuilding free space tree [ 1531.331265][T21234] inode points to missing dirent [ 1531.331292][T21234] inum: 536870912:4294967295 [ 1531.331312][T21234] mode=100755 [ 1531.331331][T21234] flags=(15300000) [ 1531.331350][T21234] journal_seq=4 [ 1531.331369][T21234] hash_seed=8469d717004af4ef [ 1531.331389][T21234] hash_type=siphash [ 1531.331412][T21234] bi_size=10 [ 1531.331431][T21234] bi_sectors=8 [ 1531.331449][T21234] bi_version=0 [ 1531.331467][T21234] bi_atime=2780562352 [ 1531.331487][T21234] bi_ctime=2780562352 [ 1531.331507][T21234] bi_mtime=2780562352 [ 1531.331526][T21234] bi_otime=2780562352 [ 1531.331546][T21234] bi_uid=0 [ 1531.331564][T21234] bi_gid=0 [ 1531.331582][T21234] bi_nlink=0 [ 1531.331601][T21234] bi_generation=0 [ 1531.331620][T21234] bi_dev=0 [ 1531.331638][T21234] bi_data_checksum=0 [ 1531.331657][T21234] bi_compression=0 [ 1531.331677][T21234] bi_project=0 [ 1531.331695][T21234] bi_background_compression=0 [ 1531.331715][T21234] bi_data_replicas=0 [ 1531.331735][T21234] bi_promote_target=0 [ 1531.331755][T21234] bi_foreground_target=0 [ 1531.331774][T21234] bi_background_target=0 [ 1531.331795][T21234] bi_erasure_code=0 [ 1531.331814][T21234] bi_fields_set=0 [ 1531.331832][T21234] bi_dir=4096 [ 1531.331851][T21234] bi_dir_offset=4330382808765833931 [ 1531.331873][T21234] bi_subvol=0 [ 1531.331892][T21234] bi_parent_subvol=0 [ 1531.331911][T21234] bi_nocow=0 [ 1531.331929][T21234] bi_depth=0 [ 1531.331947][T21234] bi_inodes_32bit=0, fixing [ 1531.820421][ T7265] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1531.974645][T21651] /dev/sg0: Can't lookup blockdev [ 1531.991767][ T7269] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1532.140077][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3348'. [ 1532.316113][T21234] inode points to missing dirent [ 1532.316139][T21234] inum: 536870912:4294967295 [ 1532.316159][T21234] mode=100755 [ 1532.316177][T21234] flags=(15300000) [ 1532.316196][T21234] journal_seq=4 [ 1532.316215][T21234] hash_seed=8469d717004af4ef [ 1532.316235][T21234] hash_type=siphash [ 1532.316254][T21234] bi_size=10 [ 1532.316272][T21234] bi_sectors=8 [ 1532.316291][T21234] bi_version=0 [ 1532.316309][T21234] bi_atime=2780562352 [ 1532.318098][T21234] bi_ctime=2780562352 [ 1532.318119][T21234] bi_mtime=2780562352 [ 1532.318137][T21234] bi_otime=2780562352 [ 1532.318155][T21234] bi_uid=0 [ 1532.318173][T21234] bi_gid=0 [ 1532.318560][T21234] bi_nlink=0 [ 1532.318579][T21234] bi_generation=0 [ 1532.318598][T21234] bi_dev=0 [ 1532.318615][T21234] bi_data_checksum=0 [ 1532.318634][T21234] bi_compression=0 [ 1532.318652][T21234] bi_project=0 [ 1532.318670][T21234] bi_background_compression=0 [ 1532.318690][T21234] bi_data_replicas=0 [ 1532.318708][T21234] bi_promote_target=0 [ 1532.318727][T21234] bi_foreground_target=0 [ 1532.318746][T21234] bi_background_target=0 [ 1532.318765][T21234] bi_erasure_code=0 [ 1532.318784][T21234] bi_fields_set=0 [ 1532.318803][T21234] bi_dir=4096 [ 1532.318820][T21234] bi_dir_offset=4330382808765833931 [ 1532.318841][T21234] bi_subvol=0 [ 1532.318859][T21234] bi_parent_subvol=0 [ 1532.318878][T21234] bi_nocow=0 [ 1532.318896][T21234] bi_depth=0 [ 1532.318914][T21234] bi_inodes_32bit=0, fixing [ 1532.658495][T21658] loop3: detected capacity change from 0 to 512 [ 1532.662726][T17769] Bluetooth: hci3: command tx timeout [ 1532.723554][T21658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.723693][T21658] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.828677][T21234] inode points to missing dirent [ 1532.828705][T21234] inum: 536870913:4294967295 [ 1532.828726][T21234] mode=100755 [ 1532.828745][T21234] flags=(15300000) [ 1532.828764][T21234] journal_seq=5 [ 1532.828784][T21234] hash_seed=b68791a594a6d5ae [ 1532.828806][T21234] hash_type=siphash [ 1532.828825][T21234] bi_size=9000 [ 1532.828845][T21234] bi_sectors=24 [ 1532.828864][T21234] bi_version=0 [ 1532.828884][T21234] bi_atime=2780562352 [ 1532.828903][T21234] bi_ctime=2780562352 [ 1532.828923][T21234] bi_mtime=2780562352 [ 1532.828943][T21234] bi_otime=2780562352 [ 1532.828963][T21234] bi_uid=0 [ 1532.828981][T21234] bi_gid=0 [ 1532.829000][T21234] bi_nlink=1 [ 1532.829019][T21234] bi_generation=0 [ 1532.829038][T21234] bi_dev=0 [ 1532.829056][T21234] bi_data_checksum=0 [ 1532.829076][T21234] bi_compression=0 [ 1532.829096][T21234] bi_project=0 [ 1532.829116][T21234] bi_background_compression=0 [ 1532.829137][T21234] bi_data_replicas=0 [ 1532.829156][T21234] bi_promote_target=0 [ 1532.829176][T21234] bi_foreground_target=0 [ 1532.829197][T21234] bi_background_target=0 [ 1532.829217][T21234] bi_erasure_code=0 [ 1532.829237][T21234] bi_fields_set=0 [ 1532.829256][T21234] bi_dir=4096 [ 1532.829275][T21234] bi_dir_offset=1896155912177158345 [ 1532.829297][T21234] bi_subvol=0 [ 1532.829315][T21234] bi_parent_subvol=0 [ 1532.829336][T21234] bi_nocow=0 [ 1532.829354][T21234] bi_depth=0 [ 1532.829373][T21234] bi_inodes_32bit=0, fixing [ 1533.062702][T16649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.191856][T21668] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 1533.191890][T21668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1533.812670][T21682] loop3: detected capacity change from 0 to 32768 [ 1534.025101][T21686] bridge0: port 3(vlan2) entered blocking state [ 1534.025549][T21686] bridge0: port 3(vlan2) entered disabled state [ 1534.026502][T21686] vlan2: entered allmulticast mode [ 1534.050623][T21682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3351 (21682) [ 1534.313841][T21686] vlan2: left allmulticast mode [ 1534.550287][T21682] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1534.633110][T21682] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 1534.633168][T21682] BTRFS info (device loop3): using free-space-tree [ 1534.636424][T21685] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1534.636560][T21234] inode points to missing dirent [ 1534.636585][T21234] inum: 536870913:4294967295 [ 1534.636606][T21234] mode=100755 [ 1534.636625][T21234] flags=(15300000) [ 1534.636645][T21234] journal_seq=5 [ 1534.636664][T21234] hash_seed=b68791a594a6d5ae [ 1534.636684][T21234] hash_type=siphash [ 1534.636704][T21234] bi_size=9000 [ 1534.636722][T21234] bi_sectors=24 [ 1534.636741][T21234] bi_version=0 [ 1534.636759][T21234] bi_atime=2780562352 [ 1534.636779][T21234] bi_ctime=2780562352 [ 1534.636799][T21234] bi_mtime=2780562352 [ 1534.636819][T21234] bi_otime=2780562352 [ 1534.636839][T21234] bi_uid=0 [ 1534.636857][T21234] bi_gid=0 [ 1534.636875][T21234] bi_nlink=1 [ 1534.636894][T21234] bi_generation=0 [ 1534.636913][T21234] bi_dev=0 [ 1534.636932][T21234] bi_data_checksum=0 [ 1534.636951][T21234] bi_compression=0 [ 1534.636970][T21234] bi_project=0 [ 1534.636988][T21234] bi_background_compression=0 [ 1534.637025][T21234] bi_data_replicas=0 [ 1534.637045][T21234] bi_promote_target=0 [ 1534.637069][T21234] bi_foreground_target=0 [ 1534.637089][T21234] bi_background_target=0 [ 1534.637109][T21234] bi_erasure_code=0 [ 1534.637129][T21234] bi_fields_set=0 [ 1534.637148][T21234] bi_dir=4096 [ 1534.637166][T21234] bi_dir_offset=1896155912177158345 [ 1534.637188][T21234] bi_subvol=0 [ 1534.637207][T21234] bi_parent_subvol=0 [ 1534.637226][T21234] bi_nocow=0 [ 1534.637245][T21234] bi_depth=0 [ 1534.637264][T21234] bi_inodes_32bit=0, fixing [ 1534.740261][ T9683] Bluetooth: hci3: command tx timeout [ 1535.089157][T21516] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1535.153276][T21516] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1535.241329][T21516] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1535.303227][T21516] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1535.876511][T21716] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3352'. [ 1535.876578][T21716] tipc: Enabling of bearer rejected, failed to enable media [ 1536.046473][T21682] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1536.070748][T21234] done [ 1536.189794][T21234] bcachefs (loop5): check_extents... done [ 1536.225377][T21516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.274669][T21516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.288688][T21234] bcachefs (loop5): check_indirect_extents... done [ 1536.349188][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.356374][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1536.360298][T21234] bcachefs (loop5): check_dirents... [ 1536.382932][T21234] directory 4096:4294967295 with wrong i_nlink: got 2, should be 1, fixing [ 1536.480343][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.480424][ T6296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1536.558331][T21516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1536.558372][T21516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1536.602960][T16649] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1536.750399][T21234] done [ 1536.773533][T21234] bcachefs (loop5): check_xattrs... done [ 1536.897856][T21234] bcachefs (loop5): check_root... done [ 1536.930897][T21234] bcachefs (loop5): check_unreachable_inodes... [ 1536.932694][T21234] unreachable inode: [ 1536.932718][T21234] inum: 4098:4294967295 [ 1536.932738][T21234] mode=40755 [ 1536.932755][T21234] flags=(4300000) [ 1536.932774][T21234] journal_seq=34 [ 1536.932793][T21234] hash_seed=ece93825deac2443 [ 1536.932813][T21234] hash_type=siphash [ 1536.932832][T21234] bi_size=12666373951979520 [ 1536.932852][T21234] bi_sectors=0 [ 1536.932870][T21234] bi_version=0 [ 1536.932888][T21234] bi_atime=2770562249 [ 1536.932907][T21234] bi_ctime=2780562352 [ 1536.932927][T21234] bi_mtime=2780562352 [ 1536.932945][T21234] bi_otime=2770562249 [ 1536.932964][T21234] bi_uid=0 [ 1536.932982][T21234] bi_gid=0 [ 1536.933000][T21234] bi_nlink=0 [ 1536.933017][T21234] bi_generation=0 [ 1536.933036][T21234] bi_dev=0 [ 1536.933053][T21234] bi_data_checksum=0 [ 1536.933072][T21234] bi_compression=0 [ 1536.933091][T21234] bi_project=0 [ 1536.933110][T21234] bi_background_compression=0 [ 1536.933130][T21234] bi_data_replicas=0 [ 1536.933149][T21234] bi_promote_target=0 [ 1536.933168][T21234] bi_foreground_target=0 [ 1536.933187][T21234] bi_background_target=0 [ 1536.933206][T21234] bi_erasure_code=0 [ 1536.933230][T21234] bi_fields_set=0 [ 1536.933249][T21234] bi_dir=0 [ 1536.933267][T21234] bi_dir_offset=0 [ 1536.933285][T21234] bi_subvol=0 [ 1536.933303][T21234] bi_parent_subvol=0 [ 1536.933322][T21234] bi_nocow=0 [ 1536.933341][T21234] bi_depth=0 [ 1536.933358][T21234] bi_inodes_32bit=0, fixing [ 1537.401160][T21186] Bluetooth: hci0: command 0x0406 tx timeout [ 1537.526137][T21744] overlayfs: failed to resolve './file1': -2 [ 1537.627031][T21745] rdma_rxe: rxe_newlink: failed to add lo [ 1538.398207][T21516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.815132][T21759] 9pnet_fd: Insufficient options for proto=fd [ 1539.357765][T21758] loop6: detected capacity change from 0 to 512 [ 1539.481123][T21758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.481274][T21758] ext4 filesystem being mounted at /479/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.700310][T21771] netlink: 'syz.2.3364': attribute type 1 has an invalid length. [ 1539.700345][T21771] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1539.832341][T21234] unreachable inode: [ 1539.832368][T21234] inum: 4098:4294967295 [ 1539.832388][T21234] mode=40755 [ 1539.832407][T21234] flags=(4300000) [ 1539.832427][T21234] journal_seq=34 [ 1539.832446][T21234] hash_seed=ece93825deac2443 [ 1539.832467][T21234] hash_type=siphash [ 1539.832486][T21234] bi_size=12666373951979520 [ 1539.832507][T21234] bi_sectors=0 [ 1539.832525][T21234] bi_version=0 [ 1539.832544][T21234] bi_atime=2770562249 [ 1539.832564][T21234] bi_ctime=2780562352 [ 1539.832583][T21234] bi_mtime=2780562352 [ 1539.832602][T21234] bi_otime=2770562249 [ 1539.832622][T21234] bi_uid=0 [ 1539.832641][T21234] bi_gid=0 [ 1539.832658][T21234] bi_nlink=0 [ 1539.832677][T21234] bi_generation=0 [ 1539.832696][T21234] bi_dev=0 [ 1539.833018][T21234] bi_data_checksum=0 [ 1539.833038][T21234] bi_compression=0 [ 1539.833058][T21234] bi_project=0 [ 1539.833077][T21234] bi_background_compression=0 [ 1539.833097][T21234] bi_data_replicas=0 [ 1539.833116][T21234] bi_promote_target=0 [ 1539.833136][T21234] bi_foreground_target=0 [ 1539.833162][T21234] bi_background_target=0 [ 1539.833182][T21234] bi_erasure_code=0 [ 1539.833202][T21234] bi_fields_set=0 [ 1539.833220][T21234] bi_dir=0 [ 1539.833239][T21234] bi_dir_offset=0 [ 1539.833257][T21234] bi_subvol=0 [ 1539.833276][T21234] bi_parent_subvol=0 [ 1539.833295][T21234] bi_nocow=0 [ 1539.833314][T21234] bi_depth=0 [ 1539.833332][T21234] bi_inodes_32bit=0, fixing [ 1539.849668][ T9306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.755942][T21516] veth0_vlan: entered promiscuous mode [ 1540.805071][T21516] veth1_vlan: entered promiscuous mode [ 1540.916847][T21516] veth0_macvtap: entered promiscuous mode [ 1540.939603][T21516] veth1_macvtap: entered promiscuous mode [ 1541.054058][T21516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.054093][T21516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.059716][T21516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.076666][T21516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.076700][T21516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.078499][T21516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.094950][T21516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.095010][T21516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.095065][T21516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.095121][T21516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.364576][T21234] unreachable inode: [ 1541.364600][T21234] inum: 4098:4294967295 [ 1541.364620][T21234] mode=40755 [ 1541.364638][T21234] flags=(4300000) [ 1541.364658][T21234] journal_seq=34 [ 1541.364676][T21234] hash_seed=ece93825deac2443 [ 1541.364696][T21234] hash_type=siphash [ 1541.364715][T21234] bi_size=12666373951979520 [ 1541.364735][T21234] bi_sectors=0 [ 1541.364754][T21234] bi_version=0 [ 1541.364772][T21234] bi_atime=2770562249 [ 1541.364792][T21234] bi_ctime=2780562352 [ 1541.364811][T21234] bi_mtime=2780562352 [ 1541.364830][T21234] bi_otime=2770562249 [ 1541.364849][T21234] bi_uid=0 [ 1541.364867][T21234] bi_gid=0 [ 1541.364884][T21234] bi_nlink=0 [ 1541.364902][T21234] bi_generation=0 [ 1541.364921][T21234] bi_dev=0 [ 1541.364938][T21234] bi_data_checksum=0 [ 1541.364958][T21234] bi_compression=0 [ 1541.364976][T21234] bi_project=0 [ 1541.364994][T21234] bi_background_compression=0 [ 1541.365015][T21234] bi_data_replicas=0 [ 1541.365034][T21234] bi_promote_target=0 [ 1541.365053][T21234] bi_foreground_target=0 [ 1541.365073][T21234] bi_background_target=0 [ 1541.365093][T21234] bi_erasure_code=0 [ 1541.365111][T21234] bi_fields_set=0 [ 1541.365130][T21234] bi_dir=0 [ 1541.365154][T21234] bi_dir_offset=0 [ 1541.365172][T21234] bi_subvol=0 [ 1541.365190][T21234] bi_parent_subvol=0 [ 1541.365209][T21234] bi_nocow=0 [ 1541.365227][T21234] bi_depth=0 [ 1541.365245][T21234] bi_inodes_32bit=0, fixing [ 1541.404808][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.404839][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.448970][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.449000][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.139337][T21809] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3372'. [ 1542.362033][T21234] unreachable inode: [ 1542.362107][T21234] inum: 4099:4294967295 [ 1542.362176][T21234] mode=100755 [ 1542.362197][T21234] flags=(4300000) [ 1542.362272][T21234] journal_seq=34 [ 1542.362340][T21234] hash_seed=fc917866faeb7b5b [ 1542.362412][T21234] hash_type=siphash [ 1542.362479][T21234] bi_size=1050 [ 1542.362545][T21234] bi_sectors=8 [ 1542.362610][T21234] bi_version=0 [ 1542.362676][T21234] bi_atime=2770562249 [ 1542.362742][T21234] bi_ctime=2770562249 [ 1542.362809][T21234] bi_mtime=2770562249 [ 1542.362877][T21234] bi_otime=2770562249 [ 1542.362943][T21234] bi_uid=0 [ 1542.363072][T21234] bi_gid=0 [ 1542.363137][T21234] bi_nlink=0 [ 1542.363269][T21234] bi_generation=0 [ 1542.363336][T21234] bi_dev=0 [ 1542.363463][T21234] bi_data_checksum=0 [ 1542.363541][T21234] bi_compression=0 [ 1542.363609][T21234] bi_project=0 [ 1542.363675][T21234] bi_background_compression=0 [ 1542.363743][T21234] bi_data_replicas=0 [ 1542.363809][T21234] bi_promote_target=0 [ 1542.363876][T21234] bi_foreground_target=0 [ 1542.363944][T21234] bi_background_target=0 [ 1542.364010][T21234] bi_erasure_code=0 [ 1542.364077][T21234] bi_fields_set=0 [ 1542.364143][T21234] bi_dir=0 [ 1542.364246][T21234] bi_dir_offset=0 [ 1542.418224][T21234] bi_subvol=0 [ 1542.418301][T21234] bi_parent_subvol=0 [ 1542.418366][T21234] bi_nocow=0 [ 1542.418432][T21234] bi_depth=0 [ 1542.418497][T21234] bi_inodes_32bit=0, fixing [ 1544.645116][T21826] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1544.703418][T21234] unreachable inode: [ 1544.703444][T21234] inum: 4100:4294967295 [ 1544.703464][T21234] mode=120777 [ 1544.703482][T21234] flags=(4300000) [ 1544.703501][T21234] journal_seq=36 [ 1544.703520][T21234] hash_seed=f4891abdd5c0cd85 [ 1544.703539][T21234] hash_type=siphash [ 1544.703559][T21234] bi_size=38 [ 1544.703576][T21234] bi_sectors=8 [ 1544.703595][T21234] bi_version=0 [ 1544.703613][T21234] bi_atime=2770562249 [ 1544.703632][T21234] bi_ctime=2780562352 [ 1544.703652][T21234] bi_mtime=2770562249 [ 1544.703672][T21234] bi_otime=2770562249 [ 1544.703691][T21234] bi_uid=0 [ 1544.703709][T21234] bi_gid=0 [ 1544.703727][T21234] bi_nlink=0 [ 1544.703745][T21234] bi_generation=0 [ 1544.703764][T21234] bi_dev=0 [ 1544.703782][T21234] bi_data_checksum=0 [ 1544.703801][T21234] bi_compression=0 [ 1544.703821][T21234] bi_project=0 [ 1544.703839][T21234] bi_background_compression=0 [ 1544.703860][T21234] bi_data_replicas=0 [ 1544.703878][T21234] bi_promote_target=0 [ 1544.703898][T21234] bi_foreground_target=0 [ 1544.703918][T21234] bi_background_target=0 [ 1544.703938][T21234] bi_erasure_code=0 [ 1544.703957][T21234] bi_fields_set=0 [ 1544.703976][T21234] bi_dir=0 [ 1544.703993][T21234] bi_dir_offset=0 [ 1544.704012][T21234] bi_subvol=0 [ 1544.704030][T21234] bi_parent_subvol=0 [ 1544.704050][T21234] bi_nocow=0 [ 1544.704067][T21234] bi_depth=0 [ 1544.704085][T21234] bi_inodes_32bit=0, fixing [ 1546.150019][T14684] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1546.341324][T14684] usb 9-1: Using ep0 maxpacket: 32 [ 1546.343002][T14684] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1546.347537][T14684] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1546.347582][T14684] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1546.347622][T14684] usb 9-1: Product: syz [ 1546.347650][T14684] usb 9-1: Manufacturer: syz [ 1546.347679][T14684] usb 9-1: SerialNumber: syz [ 1546.349992][T14684] usb 9-1: config 0 descriptor?? [ 1546.352817][T21842] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1546.563196][T14684] usb 9-1: USB disconnect, device number 6 [ 1547.441242][T21234] unreachable inode: [ 1547.441270][T21234] inum: 536870912:4294967295 [ 1547.441290][T21234] mode=100755 [ 1547.441309][T21234] flags=(4300000) [ 1547.441327][T21234] journal_seq=37 [ 1547.441346][T21234] hash_seed=8469d717004af4ef [ 1547.441366][T21234] hash_type=siphash [ 1547.441385][T21234] bi_size=10 [ 1547.441410][T21234] bi_sectors=8 [ 1547.441429][T21234] bi_version=0 [ 1547.441447][T21234] bi_atime=2780562352 [ 1547.441467][T21234] bi_ctime=2780562352 [ 1547.441486][T21234] bi_mtime=2780562352 [ 1547.441505][T21234] bi_otime=2780562352 [ 1547.441525][T21234] bi_uid=0 [ 1547.441542][T21234] bi_gid=0 [ 1547.441561][T21234] bi_nlink=0 [ 1547.441579][T21234] bi_generation=0 [ 1547.441597][T21234] bi_dev=0 [ 1547.441616][T21234] bi_data_checksum=0 [ 1547.441634][T21234] bi_compression=0 [ 1547.441654][T21234] bi_project=0 [ 1547.441672][T21234] bi_background_compression=0 [ 1547.441693][T21234] bi_data_replicas=0 [ 1547.441712][T21234] bi_promote_target=0 [ 1547.441731][T21234] bi_foreground_target=0 [ 1547.441751][T21234] bi_background_target=0 [ 1547.441771][T21234] bi_erasure_code=0 [ 1547.441790][T21234] bi_fields_set=0 [ 1547.441809][T21234] bi_dir=0 [ 1547.441827][T21234] bi_dir_offset=0 [ 1547.441845][T21234] bi_subvol=0 [ 1547.441864][T21234] bi_parent_subvol=0 [ 1547.441883][T21234] bi_nocow=0 [ 1547.441901][T21234] bi_depth=0 [ 1547.441919][T21234] bi_inodes_32bit=0, fixing [ 1548.038967][T17769] block nbd2: Receive control failed (result -32) [ 1548.212288][T21877] block nbd2: shutting down sockets [ 1548.377949][T21234] unreachable inode: [ 1548.377977][T21234] inum: 536870913:4294967295 [ 1548.377998][T21234] mode=100755 [ 1548.378016][T21234] flags=(7300000) [ 1548.378035][T21234] journal_seq=38 [ 1548.378054][T21234] hash_seed=b68791a594a6d5ae [ 1548.378075][T21234] hash_type=siphash [ 1548.378093][T21234] bi_size=9000 [ 1548.378112][T21234] bi_sectors=24 [ 1548.378130][T21234] bi_version=0 [ 1548.378149][T21234] bi_atime=2780562352 [ 1548.378168][T21234] bi_ctime=2780562352 [ 1548.378187][T21234] bi_mtime=2780562352 [ 1548.378207][T21234] bi_otime=2780562352 [ 1548.378227][T21234] bi_uid=0 [ 1548.378244][T21234] bi_gid=0 [ 1548.378262][T21234] bi_nlink=1 [ 1548.378280][T21234] bi_generation=0 [ 1548.378299][T21234] bi_dev=0 [ 1548.378317][T21234] bi_data_checksum=0 [ 1548.378335][T21234] bi_compression=0 [ 1548.378355][T21234] bi_project=0 [ 1548.378374][T21234] bi_background_compression=0 [ 1548.378394][T21234] bi_data_replicas=0 [ 1548.378413][T21234] bi_promote_target=0 [ 1548.378437][T21234] bi_foreground_target=0 [ 1548.378458][T21234] bi_background_target=0 [ 1548.378478][T21234] bi_erasure_code=0 [ 1548.378497][T21234] bi_fields_set=0 [ 1548.378515][T21234] bi_dir=0 [ 1548.378534][T21234] bi_dir_offset=0 [ 1548.378552][T21234] bi_subvol=0 [ 1548.378570][T21234] bi_parent_subvol=0 [ 1548.378590][T21234] bi_nocow=0 [ 1548.378608][T21234] bi_depth=0 [ 1548.378626][T21234] bi_inodes_32bit=0, fixing [ 1548.983653][T21892] rdma_rxe: rxe_newlink: failed to add lo [ 1550.223045][T21893] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1550.347336][T21234] unreachable inode: [ 1550.347363][T21234] inum: 536870914:4294967295 [ 1550.347384][T21234] mode=100755 [ 1550.347407][T21234] flags=(15300000) [ 1550.347425][T21234] journal_seq=4 [ 1550.347442][T21234] hash_seed=d483206f1ed95abf [ 1550.347462][T21234] hash_type=siphash [ 1550.347481][T21234] bi_size=100 [ 1550.347498][T21234] bi_sectors=8 [ 1550.347516][T21234] bi_version=1126999418470400 [ 1550.347537][T21234] bi_atime=0 [ 1550.347554][T21234] bi_ctime=0 [ 1550.347573][T21234] bi_mtime=0 [ 1550.347591][T21234] bi_otime=2780562352 [ 1550.347610][T21234] bi_uid=2780562352 [ 1550.347629][T21234] bi_gid=0 [ 1550.347647][T21234] bi_nlink=2780562352 [ 1550.347667][T21234] bi_generation=0 [ 1550.347685][T21234] bi_dev=0 [ 1550.347703][T21234] bi_data_checksum=0 [ 1550.347723][T21234] bi_compression=0 [ 1550.347741][T21234] bi_project=0 [ 1550.347760][T21234] bi_background_compression=0 [ 1550.347780][T21234] bi_data_replicas=0 [ 1550.347799][T21234] bi_promote_target=0 [ 1550.347818][T21234] bi_foreground_target=0 [ 1550.347838][T21234] bi_background_target=0 [ 1550.347858][T21234] bi_erasure_code=0 [ 1550.347877][T21234] bi_fields_set=0 [ 1550.347896][T21234] bi_dir=0 [ 1550.347913][T21234] bi_dir_offset=0 [ 1550.347932][T21234] bi_subvol=0 [ 1550.347951][T21234] bi_parent_subvol=0 [ 1550.347970][T21234] bi_nocow=0 [ 1550.347988][T21234] bi_depth=0 [ 1550.348006][T21234] bi_inodes_32bit=0, fixing [ 1551.140997][T21921] bridge0: port 3(vlan1) entered blocking state [ 1551.141434][T21921] bridge0: port 3(vlan1) entered disabled state [ 1551.142327][T21921] vlan1: entered allmulticast mode [ 1551.672094][T21921] vlan1: left allmulticast mode [ 1551.804997][T21925] netlink: 'syz.3.3399': attribute type 10 has an invalid length. [ 1551.805039][T21925] syz_tun: entered promiscuous mode [ 1551.805068][T21925] syz_tun: left allmulticast mode [ 1551.816632][T21925] syz_tun: entered allmulticast mode [ 1551.817011][T21925] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1552.203335][T21935] loop1: detected capacity change from 0 to 512 [ 1552.382801][T21935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1552.382931][T21935] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.518360][T21234] unreachable inode: [ 1552.518392][T21234] inum: 536870914:4294967295 [ 1552.518419][T21234] mode=100755 [ 1552.518442][T21234] flags=(15300000) [ 1552.518468][T21234] journal_seq=4 [ 1552.518494][T21234] hash_seed=d483206f1ed95abf [ 1552.518491][T21920] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1552.518525][T21234] hash_type=siphash [ 1552.518550][T21234] bi_size=100 [ 1552.518574][T21234] bi_sectors=8 [ 1552.518596][T21234] bi_version=1126999418470400 [ 1552.518620][T21234] bi_atime=0 [ 1552.518641][T21234] bi_ctime=0 [ 1552.518663][T21234] bi_mtime=0 [ 1552.518681][T21234] bi_otime=2780562352 [ 1552.518701][T21234] bi_uid=2780562352 [ 1552.518724][T21234] bi_gid=0 [ 1552.518743][T21234] bi_nlink=2780562352 [ 1552.518763][T21234] bi_generation=0 [ 1552.518784][T21234] bi_dev=0 [ 1552.518806][T21234] bi_data_checksum=0 [ 1552.518830][T21234] bi_compression=0 [ 1552.518853][T21234] bi_project=0 [ 1552.518875][T21234] bi_background_compression=0 [ 1552.518900][T21234] bi_data_replicas=0 [ 1552.518923][T21234] bi_promote_target=0 [ 1552.518947][T21234] bi_foreground_target=0 [ 1552.518971][T21234] bi_background_target=0 [ 1552.518995][T21234] bi_erasure_code=0 [ 1552.519018][T21234] bi_fields_set=0 [ 1552.519041][T21234] bi_dir=0 [ 1552.519063][T21234] bi_dir_offset=0 [ 1552.519085][T21234] bi_subvol=0 [ 1552.519108][T21234] bi_parent_subvol=0 [ 1552.519146][T21234] bi_nocow=0 [ 1552.519173][T21234] bi_depth=0 [ 1552.523100][T21234] bi_inodes_32bit=0, fixing [ 1552.898206][T20150] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1553.577112][T21956] loop4: detected capacity change from 0 to 128 [ 1553.772149][T21957] loop3: detected capacity change from 0 to 2048 [ 1553.772934][T21957] EXT4-fs: Ignoring removed bh option [ 1553.816438][T21957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.842365][T21960] loop1: detected capacity change from 0 to 736 [ 1553.869062][T21234] done [ 1554.161268][T21234] bcachefs (loop5): check_subvolume_structure... done [ 1554.210315][T21959] loop4: detected capacity change from 128 to 0 [ 1554.226668][T21234] bcachefs (loop5): check_directory_structure... done [ 1554.271993][T21234] bcachefs (loop5): check_nlinks... [ 1554.274602][T21234] inode 536870913 type reg has wrong i_nlink (2, should be 1), fixing [ 1554.352878][T21956] syz.4.3407: attempt to access beyond end of device [ 1554.352878][T21956] loop4: rw=1, sector=1, nr_sectors = 1 limit=0 [ 1554.352963][T21956] buffer_io_error: 10 callbacks suppressed [ 1554.352984][T21956] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 1554.353116][T21956] syz.4.3407: attempt to access beyond end of device [ 1554.353116][T21956] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1554.353201][T21956] FAT-fs (loop4): FAT read failed (blocknr 1) [ 1554.353361][T21956] syz.4.3407: attempt to access beyond end of device [ 1554.353361][T21956] loop4: rw=2049, sector=3, nr_sectors = 1 limit=0 [ 1554.353407][T21956] Buffer I/O error on dev loop4, logical block 3, lost sync page write [ 1554.353924][T21967] syz.4.3407: attempt to access beyond end of device [ 1554.353924][T21967] loop4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1554.354050][T21967] FAT-fs (loop4): FAT read failed (blocknr 1) [ 1555.225960][T21979] 9pnet_fd: Insufficient options for proto=fd [ 1555.386098][T21516] syz-executor: attempt to access beyond end of device [ 1555.386098][T21516] loop4: rw=0, sector=3, nr_sectors = 1 limit=0 [ 1555.386312][T21516] FAT-fs (loop4): Directory bread(block 3) failed [ 1555.434839][T19791] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1555.458499][T19791] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1555.458555][T19791] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1555.458555][T19791] [ 1555.458576][T19791] EXT4-fs (loop3): Total free blocks count 0 [ 1555.458597][T19791] EXT4-fs (loop3): Free/Dirty block details [ 1555.458617][T19791] EXT4-fs (loop3): free_blocks=2415919104 [ 1555.458639][T19791] EXT4-fs (loop3): dirty_blocks=1888 [ 1555.458659][T19791] EXT4-fs (loop3): Block reservation details [ 1555.458677][T19791] EXT4-fs (loop3): i_reserved_data_blocks=118 [ 1555.495902][T19791] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1854 with error 28 [ 1555.583483][ T81] kworker/u8:4: attempt to access beyond end of device [ 1555.583483][ T81] loop4: rw=1, sector=40, nr_sectors = 1 limit=0 [ 1555.756122][T21234] inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing [ 1555.772877][T21975] tty tty4: ldisc open failed (-12), clearing slot 3 [ 1555.933550][T21234] done [ 1556.020027][ T81] Buffer I/O error on dev loop4, logical block 40, lost async page write [ 1556.028619][ T81] kworker/u8:4: attempt to access beyond end of device [ 1556.028619][ T81] loop4: rw=1, sector=41, nr_sectors = 1 limit=0 [ 1556.066559][T21234] bcachefs (loop5): resume_logged_ops... done [ 1556.083332][ T81] Buffer I/O error on dev loop4, logical block 41, lost async page write [ 1556.107977][T21234] bcachefs (loop5): delete_dead_inodes... done [ 1556.142942][ T81] kworker/u8:4: attempt to access beyond end of device [ 1556.142942][ T81] loop4: rw=1, sector=42, nr_sectors = 1 limit=0 [ 1556.210948][ T81] Buffer I/O error on dev loop4, logical block 42, lost async page write [ 1556.219578][ T81] kworker/u8:4: attempt to access beyond end of device [ 1556.219578][ T81] loop4: rw=1, sector=43, nr_sectors = 1 limit=0 [ 1556.223006][T21234] bcachefs (loop5): set_fs_needs_rebalance... done [ 1556.295558][ T81] Buffer I/O error on dev loop4, logical block 43, lost async page write [ 1556.328265][T21234] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 1556.329634][T21989] loop3: detected capacity change from 0 to 256 [ 1556.353814][T21234] bcachefs (loop5): check_alloc_info... [ 1556.365348][ T81] kworker/u8:4: attempt to access beyond end of device [ 1556.365348][ T81] loop4: rw=1, sector=44, nr_sectors = 1 limit=0 [ 1556.395785][T21234] done [ 1556.398592][T21234] bcachefs (loop5): check_lrus... done [ 1556.438797][T21989] msdos: Bad value for 'gid' [ 1556.444869][T21234] bcachefs (loop5): check_btree_backpointers... done [ 1556.454401][T21989] msdos: Bad value for 'gid' [ 1556.469002][ T81] Buffer I/O error on dev loop4, logical block 44, lost async page write [ 1556.477727][T21234] bcachefs (loop5): check_backpointers_to_extents... done [ 1556.512015][ T81] Buffer I/O error on dev loop4, logical block 45, lost async page write [ 1556.519981][T21234] bcachefs (loop5): check_extents_to_backpointers... done [ 1556.540835][T21994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3415'. [ 1556.553027][ T81] Buffer I/O error on dev loop4, logical block 46, lost async page write [ 1556.580675][T21234] bcachefs (loop5): check_alloc_to_lru_refs... done [ 1556.589102][T21234] bcachefs (loop5): bucket_gens_init... [ 1556.600020][ T81] Buffer I/O error on dev loop4, logical block 48, lost async page write [ 1556.619715][T21234] done [ 1556.634538][T21234] bcachefs (loop5): check_snapshot_trees... done [ 1556.658740][T21234] bcachefs (loop5): check_snapshots... done [ 1556.675218][T21234] bcachefs (loop5): check_subvols... done [ 1556.692805][T21234] bcachefs (loop5): check_subvol_children... done [ 1556.706159][T21234] bcachefs (loop5): delete_dead_snapshots... done [ 1556.719487][T21234] bcachefs (loop5): check_inodes... done [ 1556.854835][T21234] bcachefs (loop5): check_extents... done [ 1556.895274][T21234] bcachefs (loop5): check_indirect_extents... done [ 1556.954145][ T81] FAT-fs (loop4): unable to read inode block for updating (i_pos 61) [ 1556.966306][T21516] FAT-fs (loop4): unable to read inode block for updating (i_pos 61) [ 1556.975216][T21516] FAT-fs (loop4): unable to read inode block for updating (i_pos 61) [ 1556.983478][T21516] FAT-fs (loop4): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1556.990075][T21234] bcachefs (loop5): check_dirents... done [ 1557.009218][T21234] bcachefs (loop5): check_xattrs... done [ 1557.016252][T21234] bcachefs (loop5): check_root... done [ 1557.022490][T21234] bcachefs (loop5): check_unreachable_inodes... done [ 1557.030509][T21234] bcachefs (loop5): check_subvolume_structure... done [ 1557.054155][T21234] bcachefs (loop5): check_directory_structure... done [ 1557.066068][T21234] bcachefs (loop5): check_nlinks... done [ 1557.073158][T21234] bcachefs (loop5): resume_logged_ops... done [ 1557.079427][T21234] bcachefs (loop5): delete_dead_inodes... done [ 1557.113513][T21234] bcachefs (loop5): set_fs_needs_rebalance... done [ 1557.200658][T21234] bcachefs (loop5): bch2_copygc_start(): error creating copygc thread EINTR [ 1557.238311][T21234] bcachefs (loop5): error starting copygc thread [ 1557.259258][T21234] bcachefs (loop5): bch2_fs_start(): error starting filesystem EINTR [ 1557.310063][T21234] bcachefs (loop5): shutting down [ 1557.333058][T21234] bcachefs (loop5): going read-only [ 1557.377479][T21234] bcachefs (loop5): finished waiting for writes to stop [ 1557.403232][T21234] bcachefs (loop5): flushing journal and stopping allocators, journal seq 69 [ 1557.493685][T21234] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 69 [ 1557.523338][T21234] bcachefs (loop5): clean shutdown complete, journal seq 70 [ 1557.532920][T21234] bcachefs (loop5): marking filesystem clean [ 1557.577775][T21234] bcachefs (loop5): shutdown complete [ 1559.329649][T22040] 9pnet_fd: Insufficient options for proto=fd [ 1559.878615][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.273924][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.617126][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.162267][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.660387][ T81] bridge_slave_1: left allmulticast mode [ 1561.700118][ T81] bridge_slave_1: left promiscuous mode [ 1561.705890][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.834639][ T81] bridge_slave_0: left allmulticast mode [ 1561.850608][ T81] bridge_slave_0: left promiscuous mode [ 1561.900402][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.011037][T17769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1562.038875][T17769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1562.451350][T17769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1562.500001][T17769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1562.515230][T17769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1562.525781][T17769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1562.618404][T22052] loop6: detected capacity change from 0 to 32768 [ 1562.715467][T22052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3430 (22052) [ 1562.944374][T22052] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1563.137411][T22052] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 1563.268538][T22079] sz1: rxe_newlink: already configured on lo [ 1563.565277][T22052] BTRFS info (device loop6): using free-space-tree [ 1563.913752][T22052] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 1563.914096][T22052] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1564.028481][T22052] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1564.397552][T22052] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1564.548737][T22052] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1564.620247][T21186] Bluetooth: hci3: command tx timeout [ 1564.698240][T22052] BTRFS error (device loop6): open_ctree failed: -12 [ 1564.762795][T21234] bcachefs: bch2_fs_get_tree() error: EINTR [ 1566.423266][T22128] 9pnet_fd: Insufficient options for proto=fd [ 1566.654604][T17769] Bluetooth: hci3: command tx timeout [ 1567.723304][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.862515][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.981951][ T81] bond0 (unregistering): Released all slaves [ 1568.759920][T17769] Bluetooth: hci3: command tx timeout [ 1568.768726][T21234] bond0: (slave syz_tun): Releasing backup interface [ 1568.960962][T21234] syz_tun (unregistering): left allmulticast mode [ 1568.987061][T22150] /dev/sg0: Can't lookup blockdev [ 1569.225467][T22065] lo speed is unknown, defaulting to 1000 [ 1569.758117][T22136] loop2: detected capacity change from 0 to 32768 [ 1569.854377][T22136] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3444 (22136) [ 1570.795676][T22065] wg1 speed is unknown, defaulting to 1000 [ 1570.814028][T17769] Bluetooth: hci3: command tx timeout [ 1570.819980][T22168] rdma_rxe: rxe_newlink: failed to add lo [ 1571.330228][ T81] hsr_slave_0: left promiscuous mode [ 1571.379928][ T81] hsr_slave_1: left promiscuous mode [ 1571.413717][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.430031][ T937] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1571.445934][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.522888][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.563351][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.811782][T22187] netlink: 'syz.6.3454': attribute type 11 has an invalid length. [ 1571.900574][ T937] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1571.919957][ T937] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1571.941506][ T937] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1571.955690][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.026728][ T81] veth1_macvtap: left promiscuous mode [ 1572.046385][ T81] veth0_macvtap: left promiscuous mode [ 1572.067105][ T81] veth1_vlan: left promiscuous mode [ 1572.086447][ T81] veth0_vlan: left promiscuous mode [ 1572.200295][ T937] usb 4-1: usb_control_msg returned -32 [ 1572.219939][ T937] usbtmc 4-1:16.0: can't read capabilities [ 1572.928310][ T937] usb 4-1: USB disconnect, device number 2 [ 1573.012293][T22198] 9pnet_fd: Insufficient options for proto=fd [ 1576.450816][T22220] /dev/sg0: Can't lookup blockdev [ 1577.084893][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1578.120678][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1578.272005][T22230] block nbd2: server does not support multiple connections per device. [ 1578.292589][T22230] block nbd2: shutting down sockets [ 1579.698028][T22238] "syz.2.3465" (22238) uses obsolete ecb(arc4) skcipher [ 1579.711200][T22238] 9pnet_virtio: no channels available for device syz [ 1580.626422][T22235] lo speed is unknown, defaulting to 1000 [ 1582.284704][T22251] 9pnet_fd: Insufficient options for proto=fd [ 1582.314162][T22065] chnl_net:caif_netlink_parms(): no params data found [ 1583.810281][T14684] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1583.847112][T22235] wg1 speed is unknown, defaulting to 1000 [ 1583.914191][T22065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.969236][T22065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.977956][T14684] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1584.009345][T14684] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1584.040105][T22065] bridge_slave_0: entered allmulticast mode [ 1584.061100][T14684] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1584.069172][T22065] bridge_slave_0: entered promiscuous mode [ 1584.105906][T14684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.107361][T22065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.176678][T22065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.240108][T22065] bridge_slave_1: entered allmulticast mode [ 1584.288920][T22065] bridge_slave_1: entered promiscuous mode [ 1584.413123][T14684] usb 4-1: usb_control_msg returned -32 [ 1584.439098][T14684] usbtmc 4-1:16.0: can't read capabilities [ 1584.593100][T22065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.654495][T22065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.969101][T14684] usb 4-1: USB disconnect, device number 3 [ 1585.383036][T22065] team0: Port device team_slave_0 added [ 1585.464719][T22269] loop6: detected capacity change from 0 to 32768 [ 1585.605575][T22269] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1585.790901][T22065] team0: Port device team_slave_1 added [ 1585.861666][ T9306] ocfs2: Unmounting device (7,6) on (node local) [ 1586.297033][ T81] team0: Port device netdevsim0 removed [ 1586.402991][T22065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.417894][T22065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.507061][T22315] netlink: 'syz.6.3478': attribute type 11 has an invalid length. [ 1586.516402][T22065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.589287][T22065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.639867][T22065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.783010][T22065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.282562][T22330] /dev/sg0: Can't lookup blockdev [ 1587.941880][T22065] hsr_slave_0: entered promiscuous mode [ 1588.005777][T22065] hsr_slave_1: entered promiscuous mode [ 1588.051167][T22065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1588.120160][T22065] Cannot create hsr debugfs directory [ 1588.938007][T22342] "syz.6.3480" (22342) uses obsolete ecb(arc4) skcipher [ 1588.955115][T22342] 9pnet_virtio: no channels available for device syz [ 1590.890300][ T81] bridge_slave_1: left promiscuous mode [ 1590.896114][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.203963][T22361] 9pnet_fd: Insufficient options for proto=fd [ 1591.840709][ T81] bridge_slave_0: left promiscuous mode [ 1591.860216][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.231563][T22388] netlink: 'syz.6.3491': attribute type 11 has an invalid length. [ 1595.207224][T22426] /dev/sg0: Can't lookup blockdev [ 1595.825929][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.858730][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.152758][ T81] bond0 (unregistering): Released all slaves [ 1596.515581][T22444] sz1: rxe_newlink: already configured on lo [ 1597.913698][ T81] tipc: Disabling bearer [ 1597.950206][ T81] tipc: Disabling bearer [ 1598.025191][T22459] "syz.8.3496" (22459) uses obsolete ecb(arc4) skcipher [ 1598.040338][T22459] 9pnet_virtio: no channels available for device syz [ 1598.143336][ T81] tipc: Left network mode [ 1598.886611][T22461] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1600.129709][T22472] 9pnet_fd: Insufficient options for proto=fd [ 1603.150886][ T5901] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1603.238052][T22505] netlink: 'syz.1.3508': attribute type 11 has an invalid length. [ 1603.352964][ T5901] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1603.378248][ T5901] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1603.423022][ T5901] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1603.461084][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.732194][ T5901] usb 7-1: usb_control_msg returned -32 [ 1603.772002][ T5901] usbtmc 7-1:16.0: can't read capabilities [ 1603.868799][ T5901] usb 7-1: USB disconnect, device number 5 [ 1604.255905][T22523] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1605.830096][T22533] siw: device registration error -23 [ 1606.574268][ T81] hsr_slave_0: left promiscuous mode [ 1606.756469][ T81] hsr_slave_1: left promiscuous mode [ 1606.788138][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1606.890956][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.826245][T22541] loop3: detected capacity change from 0 to 32768 [ 1609.890131][T22541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3517 (22541) [ 1610.393036][T22581] netlink: 'syz.6.3524': attribute type 11 has an invalid length. [ 1610.583902][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1610.754015][T22586] "syz.2.3521" (22586) uses obsolete ecb(arc4) skcipher [ 1610.789189][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1610.860879][T22586] 9pnet_virtio: no channels available for device syz [ 1614.022125][T22599] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1615.386915][T22611] fuse: Bad value for 'fd' [ 1615.387809][T22065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1615.488249][T22065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1615.655274][T22065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1616.913911][T22065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1617.567499][T22065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.484210][T22065] 8021q: adding VLAN 0 to HW filter on device team0 [ 1618.552801][ T8548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.559956][ T8548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.040437][T22636] /dev/sg0: Can't lookup blockdev [ 1619.805132][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.812317][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.934746][T22638] netlink: 'syz.2.3539': attribute type 11 has an invalid length. [ 1619.989474][T22065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1620.228205][T22065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1620.693669][T22644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3541'. [ 1620.705371][T22644] tipc: Started in network mode [ 1620.710337][T22644] tipc: Node identity ac14140f, cluster identity 4711 [ 1620.717291][T22644] tipc: New replicast peer: 255.255.255.255 [ 1620.723700][T22644] tipc: Enabled bearer , priority 10 [ 1621.234719][T22655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1622.248936][ T26] tipc: Node number set to 2886997007 [ 1622.275226][T22658] netlink: 'syz.6.3542': attribute type 10 has an invalid length. [ 1624.392663][T21186] block nbd2: Receive control failed (result -32) [ 1625.279098][T22678] block nbd2: shutting down sockets [ 1625.659999][T22686] loop6: detected capacity change from 0 to 256 [ 1625.677396][T17769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1625.701025][T17769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1625.709394][T17769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1625.718669][T17769] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1625.756701][T17769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1625.764214][T17769] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1625.766007][T22686] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1625.806296][T22686] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1626.114330][T22687] lo speed is unknown, defaulting to 1000 [ 1626.709369][T22701] netlink: 'syz.3.3556': attribute type 11 has an invalid length. [ 1626.871478][T22687] wg1 speed is unknown, defaulting to 1000 [ 1627.036543][T22707] netlink: 'syz.8.3557': attribute type 1 has an invalid length. [ 1627.085248][T22707] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3557'. [ 1627.171400][T19791] bridge_slave_1: left allmulticast mode [ 1627.194471][T22711] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1627.300373][T19791] bridge_slave_1: left promiscuous mode [ 1627.324329][T19791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.872023][T21186] Bluetooth: hci3: command tx timeout [ 1628.207232][T19791] bridge_slave_0: left allmulticast mode [ 1628.246286][T19791] bridge_slave_0: left promiscuous mode [ 1628.271583][T22718] netlink: 'syz.8.3560': attribute type 10 has an invalid length. [ 1628.274051][T19791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.740327][T19791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.790751][T19791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.812399][T19791] bond0 (unregistering): Released all slaves [ 1629.940172][T21186] Bluetooth: hci3: command tx timeout [ 1631.169024][T22687] chnl_net:caif_netlink_parms(): no params data found [ 1631.466441][T22746] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3568'. [ 1631.568171][T21186] block nbd3: Receive control failed (result -32) [ 1631.647024][T22748] loop2: detected capacity change from 0 to 256 [ 1631.665899][T22744] block nbd3: shutting down sockets [ 1631.761869][T19791] hsr_slave_0: left promiscuous mode [ 1631.767579][T22748] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1631.808056][T22748] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1631.818171][T19791] hsr_slave_1: left promiscuous mode [ 1631.830925][T19791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.864019][T19791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.035642][T17769] Bluetooth: hci3: command tx timeout [ 1632.176408][T22762] rdma_rxe: rxe_newlink: failed to add lo [ 1634.090222][T21186] Bluetooth: hci3: command tx timeout [ 1635.254133][T22782] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 1635.966381][T19791] team0 (unregistering): Port device team_slave_1 removed [ 1637.320774][T19791] team0 (unregistering): Port device team_slave_0 removed [ 1637.987056][T22806] sz1: rxe_newlink: already configured on lo [ 1638.940767][T22808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3583'. [ 1640.430978][T22817] sz1: rxe_newlink: already configured on lo [ 1640.760534][T22782] team0: Port device netdevsim0 added [ 1640.771666][T22815] bridge0: port 3(vlan2) entered blocking state [ 1640.778006][T22815] bridge0: port 3(vlan2) entered disabled state [ 1640.784465][T22815] vlan2: entered allmulticast mode [ 1640.830833][T22815] vlan2: left allmulticast mode [ 1641.394577][T22687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.620203][T22687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.653132][T22687] bridge_slave_0: entered allmulticast mode [ 1641.670467][T22687] bridge_slave_0: entered promiscuous mode [ 1641.756754][T22687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.025412][T22687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.903995][T22687] bridge_slave_1: entered allmulticast mode [ 1642.958299][T22687] bridge_slave_1: entered promiscuous mode [ 1643.271160][T22687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.422191][T22687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.736481][T22687] team0: Port device team_slave_0 added [ 1643.773471][T22687] team0: Port device team_slave_1 added [ 1644.902411][T22851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3591'. [ 1644.912264][T22687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.859961][T22687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.924158][T22687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.953619][T22687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.967322][T22687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.019979][T22687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.041986][T22854] tipc: Enabling of bearer rejected, already enabled [ 1646.330826][T22883] /dev/sg0: Can't lookup blockdev [ 1646.928561][T22887] netlink: 'syz.3.3600': attribute type 11 has an invalid length. [ 1646.978913][T22874] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1646.988644][T22874] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1646.997499][T22874] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.006315][T22874] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.613572][T22687] hsr_slave_0: entered promiscuous mode [ 1647.664782][T22687] hsr_slave_1: entered promiscuous mode [ 1647.671082][T22687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1647.678784][T22687] Cannot create hsr debugfs directory [ 1650.176161][T22945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1650.188138][T22945] tipc: Enabling of bearer rejected, already enabled [ 1650.271395][T22687] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1650.327580][T22687] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1650.362983][T22687] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1650.404250][T22687] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1650.707594][T22954] rdma_rxe: rxe_newlink: failed to add lo [ 1650.822773][T22687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.901373][T22687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.971542][T19791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.978680][T19791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.037508][T19791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.044698][T19791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.341552][T22956] /dev/sg0: Can't lookup blockdev [ 1652.612006][T22687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.887524][T22973] netlink: 'syz.3.3616': attribute type 11 has an invalid length. [ 1657.081126][T22687] veth0_vlan: entered promiscuous mode [ 1657.187392][T22687] veth1_vlan: entered promiscuous mode [ 1657.275100][T22687] veth0_macvtap: entered promiscuous mode [ 1657.322084][T22687] veth1_macvtap: entered promiscuous mode [ 1657.511985][T22687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.559897][T22687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.640614][T22687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.720517][T22687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.907846][T22687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.981470][T22687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.084157][T22687] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.120452][T22687] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.129231][T22687] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.199963][T22687] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.547077][T16195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.571476][T16195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.618087][T16195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.632743][T16195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.250724][T23026] loop9: detected capacity change from 0 to 512 [ 1659.455561][T23026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.548033][T23026] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.593131][T23040] netlink: 'syz.6.3628': attribute type 11 has an invalid length. [ 1659.636080][T23040] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3628'. [ 1659.832982][T22687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.383936][T23055] 9pnet_fd: Insufficient options for proto=fd [ 1663.860530][T17769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.874077][T17769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.885882][T17769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.938252][T17769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.950971][T17769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1663.959133][T17769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1664.255662][T23070] loop9: detected capacity change from 0 to 256 [ 1664.309982][T23070] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1664.367677][T23070] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1664.599890][T23064] lo speed is unknown, defaulting to 1000 [ 1666.161336][T21186] Bluetooth: hci4: command tx timeout [ 1666.205490][T23064] wg1 speed is unknown, defaulting to 1000 [ 1668.015214][T23106] netlink: 'syz.1.3642': attribute type 10 has an invalid length. [ 1668.107992][T19791] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1668.170101][T21186] Bluetooth: hci4: command tx timeout [ 1668.254838][T19791] team0: Port device netdevsim0 removed [ 1668.267189][T23110] netlink: 'syz.8.3643': attribute type 11 has an invalid length. [ 1668.359370][T23112] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3643'. [ 1669.912041][T23120] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1670.271483][T21186] Bluetooth: hci4: command tx timeout [ 1670.947369][T23124] fuse: Bad value for 'fd' [ 1671.896057][T23138] rdma_rxe: rxe_newlink: failed to add lo [ 1672.639902][T21186] Bluetooth: hci4: command tx timeout [ 1677.443452][T23133] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.452578][T23133] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.461413][T23133] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.470347][T23133] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1677.621736][T23144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1677.872638][T19791] bridge_slave_1: left promiscuous mode [ 1677.879481][T19791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1678.799850][T19791] bridge_slave_0: left promiscuous mode [ 1678.831009][T19791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.731059][T23161] netlink: 'syz.9.3658': attribute type 10 has an invalid length. [ 1680.919127][T23165] netlink: 'syz.1.3659': attribute type 11 has an invalid length. [ 1680.946978][T23167] fuse: Bad value for 'fd' [ 1680.993107][T23168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3659'. [ 1681.168331][T23170] netlink: 'syz.8.3661': attribute type 10 has an invalid length. [ 1681.606409][T19791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.631956][T19791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.649432][T19791] bond0 (unregistering): Released all slaves [ 1681.719596][T23161] team0: Port device netdevsim0 added [ 1681.739370][T23170] syz_tun: entered promiscuous mode [ 1681.745018][T23170] syz_tun: left allmulticast mode [ 1681.783827][T23170] syz_tun: entered allmulticast mode [ 1681.806435][T23170] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1681.875401][T23174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1681.938046][T23064] chnl_net:caif_netlink_parms(): no params data found [ 1682.020487][T19791] tipc: Disabling bearer [ 1682.064180][T19791] tipc: Disabling bearer [ 1682.097697][T19791] tipc: Left network mode [ 1683.019509][T21186] block nbd9: Receive control failed (result -32) [ 1683.160401][T23192] block nbd9: shutting down sockets [ 1683.559968][T23064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.578093][T23064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1683.597147][T23064] bridge_slave_0: entered allmulticast mode [ 1683.613414][T23064] bridge_slave_0: entered promiscuous mode [ 1683.666742][T23064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.710569][T23064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1683.718350][T23064] bridge_slave_1: entered allmulticast mode [ 1683.806545][T23064] bridge_slave_1: entered promiscuous mode [ 1686.820676][T23064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.892752][T23064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.120334][T23231] netlink: 'syz.8.3676': attribute type 11 has an invalid length. [ 1687.202601][T23235] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3676'. [ 1687.242251][T23236] netlink: 'syz.9.3675': attribute type 10 has an invalid length. [ 1687.276179][T23237] netlink: 'syz.3.3677': attribute type 10 has an invalid length. [ 1687.602911][T23064] team0: Port device team_slave_0 added [ 1687.624209][T23064] team0: Port device team_slave_1 added [ 1687.707722][T23249] netlink: 'syz.6.3678': attribute type 1 has an invalid length. [ 1687.789358][T23249] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3678'. [ 1688.296402][T21186] block nbd3: Receive control failed (result -32) [ 1688.305350][T21186] block nbd3: Receive control failed (result -32) [ 1688.316813][T19791] hsr_slave_0: left promiscuous mode [ 1688.343067][T19791] hsr_slave_1: left promiscuous mode [ 1688.350760][T23257] block nbd3: shutting down sockets [ 1688.353632][T19791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.600729][T19791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.916967][T23277] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1692.046910][T23296] loop9: detected capacity change from 0 to 256 [ 1692.108772][T23296] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1692.186043][T23296] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1692.332192][T23300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.604319][T23306] netlink: 'syz.6.3693': attribute type 11 has an invalid length. [ 1692.657464][T23308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3693'. [ 1692.906634][T23312] netlink: 'syz.9.3695': attribute type 1 has an invalid length. [ 1692.929861][T23312] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3695'. [ 1693.276057][ T30] audit: type=1326 audit(1742863292.956:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.9.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9618d169 code=0x7ffc0000 [ 1693.325336][ T30] audit: type=1326 audit(1742863292.956:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.9.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9618d169 code=0x7ffc0000 [ 1693.361368][ T30] audit: type=1326 audit(1742863292.956:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.9.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4f9618d169 code=0x7ffc0000 [ 1693.398145][ T30] audit: type=1326 audit(1742863292.956:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.9.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9618d169 code=0x7ffc0000 [ 1693.430377][ T30] audit: type=1326 audit(1742863293.006:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23317 comm="syz.9.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9618d169 code=0x7ffc0000 [ 1693.498153][T19791] team0 (unregistering): Port device team_slave_1 removed [ 1693.529384][T23323] loop9: detected capacity change from 0 to 512 [ 1693.562562][T19791] team0 (unregistering): Port device team_slave_0 removed [ 1693.578538][T23323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.601778][T23323] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.687466][T22687] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.518636][T23332] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1695.807865][T23064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.816750][T23064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1695.845987][T23064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.042922][T23337] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3703'. [ 1696.091035][T23064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.120449][T23064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1696.249912][T23064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1696.524835][T23350] loop6: detected capacity change from 0 to 256 [ 1696.604928][T23350] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1696.700665][T23350] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1696.763217][T23064] hsr_slave_0: entered promiscuous mode [ 1696.793300][T23064] hsr_slave_1: entered promiscuous mode [ 1697.312031][T23359] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 1697.355305][T23359] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1697.431032][T23368] loop8: detected capacity change from 0 to 256 [ 1697.455833][T23368] msdos: Bad value for 'gid' [ 1697.486991][T23368] msdos: Bad value for 'gid' [ 1697.658652][T23064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1697.679894][T23064] Cannot create hsr debugfs directory [ 1698.571095][T23396] netlink: 'syz.1.3718': attribute type 11 has an invalid length. [ 1699.156076][T23397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3718'. [ 1699.600186][T21186] block nbd9: Receive control failed (result -32) [ 1699.611043][T21186] block nbd9: Receive control failed (result -32) [ 1699.693496][T23412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1699.723111][T23392] block nbd9: shutting down sockets [ 1699.735310][T23415] loop3: detected capacity change from 0 to 512 [ 1699.767876][T23415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1699.781381][T23415] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1699.872508][T16649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1700.422306][T23433] netlink: 'syz.9.3724': attribute type 1 has an invalid length. [ 1700.511603][T23433] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3724'. [ 1701.242105][T23443] rdma_rxe: rxe_newlink: failed to add lo [ 1702.058574][T23064] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1702.173133][T23064] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1702.193552][T23454] loop1: detected capacity change from 0 to 128 [ 1702.203681][T23064] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1702.244549][T23064] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1703.792920][T23468] loop1: detected capacity change from 0 to 512 [ 1703.912553][T23468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1703.983146][T23468] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.152239][T23479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1704.161856][T23064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1704.231753][T23064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.244828][T23482] loop6: detected capacity change from 0 to 256 [ 1704.258890][T19791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.266092][T19791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.270744][T23482] msdos: Bad value for 'gid' [ 1704.311233][T19791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.314840][T21186] block nbd8: Receive control failed (result -32) [ 1704.318392][T19791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.329078][T21186] block nbd8: Receive control failed (result -32) [ 1704.358361][T20150] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1704.368476][T23476] block nbd8: shutting down sockets [ 1704.370243][T23482] msdos: Bad value for 'gid' [ 1704.391470][T19662] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1704.562527][T19662] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.597093][T19662] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1704.665763][T19662] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.067391][T23498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1706.057834][T23064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.109700][T23064] veth0_vlan: entered promiscuous mode [ 1706.162339][T23064] veth1_vlan: entered promiscuous mode [ 1706.275213][T23064] veth0_macvtap: entered promiscuous mode [ 1706.316813][T23064] veth1_macvtap: entered promiscuous mode [ 1706.330381][ T30] audit: type=1107 audit(1742863305.996:771): pid=23512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1706.407940][T23064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.438926][T23064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.489922][T23064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1706.539964][T23064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.583607][T23064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.626671][T23064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.659998][T23064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.689646][T23064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1706.727663][T23064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1706.766056][T23064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.817736][T23064] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.851449][T23064] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.893480][T23064] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.929531][T23488] loop1: detected capacity change from 0 to 32768 [ 1706.948539][T23064] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.655659][T23535] sz1: rxe_newlink: already configured on lo [ 1707.663262][T23488] warn_alloc: 1 callbacks suppressed [ 1707.663286][T23488] syz.1.3739: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1707.725045][ T26] usb 10-1: USB disconnect, device number 2 [ 1707.766093][T23488] CPU: 1 UID: 0 PID: 23488 Comm: syz.1.3739 Not tainted 6.14.0-syzkaller #0 [ 1707.766141][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1707.766163][T23488] Call Trace: [ 1707.766175][T23488] [ 1707.766189][T23488] dump_stack_lvl+0x16c/0x1f0 [ 1707.766256][T23488] warn_alloc+0x24d/0x3a0 [ 1707.766320][T23488] ? __pfx_warn_alloc+0x10/0x10 [ 1707.766393][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.766455][T23488] ? __get_vm_area_node+0x1b0/0x2f0 [ 1707.766503][T23488] ? __get_vm_area_node+0x1dc/0x2f0 [ 1707.766562][T23488] __vmalloc_node_range_noprof+0x1102/0x1530 [ 1707.766633][T23488] ? __bch2_darray_resize_noprof+0xf0/0x2c0 [ 1707.766702][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.766766][T23488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1707.766824][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.766886][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.766947][T23488] ? rcu_is_watching+0x12/0xc0 [ 1707.766987][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.767048][T23488] ? trace_kmalloc+0x2d/0xd0 [ 1707.767090][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.767150][T23488] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1707.767189][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.767254][T23488] ? kfree+0x260/0x4d0 [ 1707.767303][T23488] ? __bch2_darray_resize_noprof+0xf0/0x2c0 [ 1707.767369][T23488] __kvmalloc_node_noprof+0x14f/0x1a0 [ 1707.767424][T23488] ? __bch2_darray_resize_noprof+0xf0/0x2c0 [ 1707.767490][T23488] __bch2_darray_resize_noprof+0xf0/0x2c0 [ 1707.767558][T23488] bch2_fs_btree_write_buffer_init+0x2d0/0x380 [ 1707.767603][T23488] bch2_fs_alloc+0x1835/0x23e0 [ 1707.767659][T23488] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 1707.767725][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.767786][T23488] ? bch2_dev_in_fs+0x1bc/0x1480 [ 1707.767831][T23488] ? __pfx_bch2_dev_in_fs+0x10/0x10 [ 1707.767891][T23488] bch2_fs_open+0x7fb/0x1140 [ 1707.767966][T23488] ? __pfx_bch2_fs_open+0x10/0x10 [ 1707.768019][T23488] ? bch2_fs_get_tree+0x4ad/0x1760 [ 1707.768062][T23488] ? vfs_get_tree+0x8e/0x340 [ 1707.768105][T23488] ? path_mount+0x14e6/0x1f10 [ 1707.768164][T23488] ? __x64_sys_mount+0x28f/0x310 [ 1707.768197][T23488] ? do_syscall_64+0xcd/0x250 [ 1707.768310][T23488] ? kasan_quarantine_put+0x10a/0x240 [ 1707.768365][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.768426][T23488] ? lockdep_hardirqs_on+0x7c/0x110 [ 1707.768479][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.768546][T23488] bch2_fs_get_tree+0x1024/0x1760 [ 1707.768624][T23488] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 1707.768669][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.768732][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.768820][T23488] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1707.768863][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.768927][T23488] ? trace_cap_capable+0x1a2/0x210 [ 1707.768972][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.769033][T23488] ? apparmor_capable+0x114/0x1d0 [ 1707.769075][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.769136][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.769204][T23488] vfs_get_tree+0x8e/0x340 [ 1707.769254][T23488] path_mount+0x14e6/0x1f10 [ 1707.769317][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.769374][T23488] ? kmem_cache_free+0x2e2/0x4d0 [ 1707.769429][T23488] ? __pfx_path_mount+0x10/0x10 [ 1707.769496][T23488] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1707.769557][T23488] ? putname+0x13c/0x180 [ 1707.769599][T23488] __x64_sys_mount+0x28f/0x310 [ 1707.769636][T23488] ? __pfx___x64_sys_mount+0x10/0x10 [ 1707.769674][T23488] ? do_user_addr_fault+0x83d/0x13f0 [ 1707.769738][T23488] do_syscall_64+0xcd/0x250 [ 1707.769795][T23488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.769846][T23488] RIP: 0033:0x7f938db8e90a [ 1707.769873][T23488] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1707.769909][T23488] RSP: 002b:00007f938e96ae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1707.769943][T23488] RAX: ffffffffffffffda RBX: 00007f938e96aef0 RCX: 00007f938db8e90a [ 1707.769969][T23488] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f938e96aeb0 [ 1707.769993][T23488] RBP: 00002000000000c0 R08: 00007f938e96aef0 R09: 0000000000800000 [ 1707.770018][T23488] R10: 0000000000800000 R11: 0000000000000246 R12: 0000200000000000 [ 1707.770042][T23488] R13: 00007f938e96aeb0 R14: 0000000000005903 R15: 0000200000000200 [ 1707.770087][T23488] [ 1708.240009][T23488] Mem-Info: [ 1708.241404][T23533] bridge0: port 3(vlan2) entered blocking state [ 1708.243160][T23488] active_anon:22245 inactive_anon:0 isolated_anon:0 [ 1708.243160][T23488] active_file:2742 inactive_file:40092 isolated_file:0 [ 1708.243160][T23488] unevictable:768 dirty:150 writeback:0 [ 1708.243160][T23488] slab_reclaimable:9738 slab_unreclaimable:107179 [ 1708.243160][T23488] mapped:43059 shmem:16970 pagetables:1190 [ 1708.243160][T23488] sec_pagetables:0 bounce:0 [ 1708.243160][T23488] kernel_misc_reclaimable:0 [ 1708.243160][T23488] free:1285547 free_pcp:599 free_cma:0 [ 1708.249498][T23533] bridge0: port 3(vlan2) entered disabled state [ 1708.302359][T23533] vlan2: entered allmulticast mode [ 1708.337046][T23488] Node 0 active_anon:90080kB inactive_anon:0kB active_file:10968kB inactive_file:160292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172936kB dirty:600kB writeback:0kB shmem:67144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11608kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no [ 1708.370857][T23533] vlan2: left allmulticast mode [ 1708.399846][T23488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1708.515486][T23488] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1708.643941][T23488] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1708.727551][T23488] Node 0 DMA32 free:1232112kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:70252kB inactive_anon:0kB active_file:10968kB inactive_file:160196kB unevictable:1536kB writepending:600kB present:3129332kB managed:2547520kB mlocked:0kB bounce:0kB free_pcp:11108kB local_pcp:912kB free_cma:0kB [ 1708.794240][T23488] lowmem_reserve[]: 0 0 0 0 0 [ 1708.799091][T23488] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1708.856236][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.864908][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1708.869520][T23488] lowmem_reserve[]: 0 0 0 0 0 [ 1708.905182][T23488] Node 1 Normal free:3904292kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:0kB free_cma:0kB [ 1708.942274][T23543] siw: device registration error -23 [ 1708.944713][T23488] lowmem_reserve[]: 0 0 0 0 0 [ 1708.988370][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1708.991898][T23488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1709.020080][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1709.070328][T23488] Node 0 DMA32: 171*4kB (UME) 866*8kB (UME) 494*16kB (UME) 332*32kB (UME) 281*64kB (UME) 308*128kB (UM) 91*256kB (UME) 38*512kB (UME) 12*1024kB (UE) 3*2048kB (UME) 265*4096kB (UM) = 1230172kB [ 1709.132489][T23488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1709.170332][T23488] Node 1 Normal: 177*4kB (UE) 58*8kB (UME) 53*16kB (UME) 180*32kB (UME) 87*64kB (UME) 30*128kB (UME) 16*256kB (UME) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 945*4096kB (UM) = 3904292kB [ 1709.234479][T23488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.280047][T23488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.329455][T23488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.368833][T23488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.406048][T23488] 55395 total pagecache pages [ 1709.450713][T23488] 0 pages in swap cache [ 1709.470223][T23488] Free swap = 124652kB [ 1709.474879][T23488] Total swap = 124996kB [ 1709.510202][T23488] 2097051 pages RAM [ 1709.514179][T23488] 0 pages HighMem/MovableOnly [ 1709.756514][T23488] 428513 pages reserved [ 1709.777517][T23488] 0 pages cma reserved [ 1709.816022][T23560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3625'. [ 1709.827893][T23560] tipc: Started in network mode [ 1709.833908][T23560] tipc: Node identity ac14140f, cluster identity 4711 [ 1709.840991][T23560] tipc: New replicast peer: 255.255.255.255 [ 1709.846187][T23488] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 1709.850604][T23560] tipc: Enabled bearer , priority 10 [ 1710.267811][T23570] tipc: Enabling of bearer rejected, already enabled [ 1710.627003][T21186] block nbd9: Receive control failed (result -32) [ 1710.627651][T17769] block nbd9: Receive control failed (result -32) [ 1710.633566][T23563] block nbd9: shutting down sockets [ 1710.883901][T23488] bcachefs: bch2_fs_get_tree() error: ENOMEM [ 1710.962753][T18300] tipc: Node number set to 2886997007 [ 1711.737854][T21186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1711.749475][T21186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1711.763356][T21186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1711.776654][T21186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1711.785061][T21186] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1711.793039][T21186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1712.083871][T23583] lo speed is unknown, defaulting to 1000 [ 1712.627071][T20362] bond0: (slave syz_tun): Releasing backup interface [ 1712.651610][T20362] syz_tun (unregistering): left allmulticast mode [ 1713.448310][T23596] bridge0: port 3(gretap0) entered blocking state [ 1713.460481][T23596] bridge0: port 3(gretap0) entered disabled state [ 1713.472162][T23596] gretap0: entered promiscuous mode [ 1713.490898][T23583] wg1 speed is unknown, defaulting to 1000 [ 1713.851418][T21186] Bluetooth: hci5: command tx timeout [ 1713.856371][ T81] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1713.863934][T23610] loop6: detected capacity change from 0 to 256 [ 1713.881978][T23610] msdos: Bad value for 'gid' [ 1713.923943][T23610] msdos: Bad value for 'gid' [ 1714.198304][ T81] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1714.285634][T23624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.317516][T23625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1714.365930][ T81] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1714.473831][T23628] rdma_rxe: rxe_newlink: failed to add lo [ 1714.692174][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 1714.812150][ T81] team0: Port device netdevsim0 removed [ 1715.002445][T23643] netlink: 'syz.3.3769': attribute type 10 has an invalid length. [ 1715.061095][ T81] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1715.346271][T23643] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1715.361560][T23643] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1715.941066][T21186] Bluetooth: hci5: command tx timeout [ 1716.190169][T23643] team0: Port device netdevsim0 added [ 1716.359152][T23583] chnl_net:caif_netlink_parms(): no params data found [ 1716.526753][T23652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3771'. [ 1716.583862][T23657] loop1: detected capacity change from 0 to 256 [ 1716.759428][T23657] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1716.780783][T23657] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1717.027904][T23669] loop2: detected capacity change from 0 to 2048 [ 1717.181057][T23669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1718.004182][T23669] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.3775: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1718.030378][T21186] Bluetooth: hci5: command tx timeout [ 1718.101528][T23583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.108692][T23583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.242056][T23583] bridge_slave_0: entered allmulticast mode [ 1718.249074][T23583] bridge_slave_0: entered promiscuous mode [ 1718.279156][T23669] EXT4-fs (loop2): Remounting filesystem read-only [ 1718.321284][ T81] bridge_slave_1: left allmulticast mode [ 1718.326995][ T81] bridge_slave_1: left promiscuous mode [ 1718.403863][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.630567][T23064] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.116986][ T81] bridge_slave_0: left promiscuous mode [ 1719.313615][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.690595][T23693] loop2: detected capacity change from 0 to 256 [ 1719.700989][T23693] msdos: Bad value for 'gid' [ 1719.705665][T23693] msdos: Bad value for 'gid' [ 1720.090727][T21186] Bluetooth: hci5: command tx timeout [ 1722.388891][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1722.399510][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.409697][ T81] bond0 (unregistering): Released all slaves [ 1722.425866][T23583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.435003][T23583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.442307][T23583] bridge_slave_1: entered allmulticast mode [ 1722.449596][T23583] bridge_slave_1: entered promiscuous mode [ 1722.521935][T23689] bridge0: port 3(vlan2) entered blocking state [ 1722.528388][T23689] bridge0: port 3(vlan2) entered disabled state [ 1722.535279][T23689] vlan2: entered allmulticast mode [ 1722.541285][T16192] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1722.550211][T23689] vlan2: left allmulticast mode [ 1722.579559][T23697] pimreg: entered allmulticast mode [ 1722.602920][T23699] pimreg: left allmulticast mode [ 1722.686306][T23707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3783'. [ 1722.695819][T23708] tipc: Enabling of bearer rejected, already enabled [ 1722.862490][T16192] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.920150][T16192] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1722.959473][T16192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.032163][T23722] loop3: detected capacity change from 0 to 256 [ 1723.055261][ T81] tipc: Disabling bearer [ 1723.087033][T23722] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1723.090055][ T81] tipc: Left network mode [ 1723.111389][T23583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.128188][T23721] loop1: detected capacity change from 0 to 512 [ 1723.155872][T23722] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1723.163002][T23583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.252849][T23721] EXT4-fs (loop1): too many log groups per flexible block group [ 1723.271776][T23726] loop9: detected capacity change from 0 to 8 [ 1723.274928][T23721] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1723.290751][T23721] EXT4-fs (loop1): mount failed [ 1723.424657][T23726] SQUASHFS error: xz decompression failed, data probably corrupt [ 1723.437177][T23726] SQUASHFS error: Failed to read block 0x60: -5 [ 1723.485852][T23726] SQUASHFS error: xz decompression failed, data probably corrupt [ 1723.539895][T23726] SQUASHFS error: Failed to read block 0x60: -5 [ 1723.571671][ T30] audit: type=1800 audit(1742863323.246:772): pid=23726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3789" name="file1" dev="loop9" ino=1 res=0 errno=0 [ 1723.626110][T23583] team0: Port device team_slave_0 added [ 1723.751929][T23583] team0: Port device team_slave_1 added [ 1723.935883][T23744] loop3: detected capacity change from 0 to 256 [ 1723.980758][T23744] msdos: Bad value for 'gid' [ 1723.985433][T23744] msdos: Bad value for 'gid' [ 1724.184910][T23751] netlink: 'syz.1.3795': attribute type 10 has an invalid length. [ 1724.209827][T23751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3795'. [ 1724.257236][T23583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.293560][T23583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1724.373262][T23583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.412319][T23751] batadv0: entered promiscuous mode [ 1724.418187][T23751] batadv0: entered allmulticast mode [ 1724.441605][T23751] bridge0: port 3(batadv0) entered blocking state [ 1724.465091][T23751] bridge0: port 3(batadv0) entered disabled state [ 1724.492303][T23751] bridge0: port 3(batadv0) entered blocking state [ 1724.498939][T23751] bridge0: port 3(batadv0) entered forwarding state [ 1724.536777][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.566626][T23753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.632013][T23753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1724.690968][T23753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.752101][T23675] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1724.762316][T23675] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1724.777278][T23753] bridge0: port 3(batadv0) entered disabled state [ 1725.122162][T23753] bridge0: port 3(batadv0) entered disabled state [ 1725.785950][T23583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1725.839936][T23583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1725.911507][T23506] usb 3-1: USB disconnect, device number 4 [ 1725.968626][T23583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.016609][T23763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3798'. [ 1726.025983][T23764] tipc: Enabling of bearer rejected, already enabled [ 1726.239972][ T81] hsr_slave_0: left promiscuous mode [ 1726.264449][ T81] hsr_slave_1: left promiscuous mode [ 1726.298837][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1726.313792][T23769] loop2: detected capacity change from 0 to 512 [ 1726.339566][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.403044][T23769] EXT4-fs: Ignoring removed i_version option [ 1726.450118][T23769] EXT4-fs: Ignoring removed mblk_io_submit option [ 1726.470005][T23769] ext4: Unknown parameter 'seclabel' [ 1726.696792][T23783] loop9: detected capacity change from 0 to 256 [ 1726.785833][T23783] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1726.862114][T23783] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1727.007666][T23792] loop6: detected capacity change from 0 to 512 [ 1727.050911][T23792] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1727.132529][T23792] EXT4-fs (loop6): 1 truncate cleaned up [ 1727.221637][T23792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1727.446828][ T30] audit: type=1800 audit(1742863327.126:773): pid=23792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3807" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1727.651012][T23813] loop1: detected capacity change from 0 to 512 [ 1727.655428][ T9306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1727.685831][T23813] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1727.922914][T23813] block device autoloading is deprecated and will be removed. [ 1727.957570][T23813] bio_check_eod: 46 callbacks suppressed [ 1727.957599][T23813] syz.1.3809: attempt to access beyond end of device [ 1727.957599][T23813] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1728.029907][T16192] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1728.068494][T23813] EXT4-fs (loop1): couldn't read superblock of external journal [ 1728.225420][T23819] /dev/sg0: Can't lookup blockdev [ 1728.291991][T16192] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.466754][T16192] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1728.625673][T16192] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1728.655574][T16192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.994096][T16192] usbtmc 4-1:16.0: bulk endpoints not found [ 1730.114814][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1730.286855][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1731.472038][T18300] usb 4-1: USB disconnect, device number 4 [ 1731.973779][T19907] smc: removing ib device sz1 [ 1731.987882][T23826] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3812'. [ 1731.997796][T23827] tipc: Enabling of bearer rejected, already enabled [ 1732.267123][T23879] loop3: detected capacity change from 0 to 1024 [ 1732.305903][T23879] EXT4-fs: inline encryption not supported [ 1732.319967][T23879] EXT4-fs: Ignoring removed i_version option [ 1732.332468][T23879] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1732.526799][T23879] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 2: comm syz.3.3820: lblock 2 mapped to illegal pblock 2 (length 1) [ 1732.568696][T23890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1732.577151][T23879] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1732.598672][T23893] loop6: detected capacity change from 0 to 8 [ 1732.632444][T23879] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 48: comm syz.3.3820: lblock 0 mapped to illegal pblock 48 (length 1) [ 1732.672759][T23896] netlink: 'syz.1.3823': attribute type 10 has an invalid length. [ 1732.675065][T23879] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1732.720721][T16192] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1732.738573][T23896] syz_tun: entered promiscuous mode [ 1732.763238][T23879] EXT4-fs error (device loop3): ext4_acquire_dquot:6925: comm syz.3.3820: Failed to acquire dquot type 0 [ 1732.784433][T23879] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 1732.810798][T23896] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1732.838225][T23879] EXT4-fs error (device loop3): ext4_evict_inode:256: inode #11: comm syz.3.3820: mark_inode_dirty error [ 1732.880694][T16192] usb 10-1: device descriptor read/64, error -71 [ 1732.918021][T23583] hsr_slave_0: entered promiscuous mode [ 1732.924649][T23879] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1732.936656][T23583] hsr_slave_1: entered promiscuous mode [ 1732.965963][T23879] EXT4-fs (loop3): 1 orphan inode deleted [ 1732.983175][ T6296] EXT4-fs error (device loop3): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 1733.000317][T23583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1733.053094][T23879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1733.060076][T23583] Cannot create hsr debugfs directory [ 1733.065806][ T6296] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1733.090419][T23901] loop6: detected capacity change from 0 to 512 [ 1733.123558][ T6296] EXT4-fs error (device loop3): ext4_release_dquot:6948: comm kworker/u8:11: Failed to release dquot type 0 [ 1733.150219][T16192] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1733.201211][T23901] EXT4-fs (loop6): too many log groups per flexible block group [ 1733.234515][T23879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1733.240167][T23901] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 1733.262903][T23879] EXT4-fs error (device loop3): __ext4_get_inode_loc:4434: comm syz.3.3820: Invalid inode table block 1 in block_group 0 [ 1733.281894][T23879] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 1733.294398][T23879] EXT4-fs error (device loop3): ext4_quota_off:7194: inode #3: comm syz.3.3820: mark_inode_dirty error [ 1733.305711][T16192] usb 10-1: device descriptor read/64, error -71 [ 1733.326409][T23901] EXT4-fs (loop6): mount failed [ 1733.432749][T16192] usb usb10-port1: attempt power cycle [ 1733.757333][T23913] loop3: detected capacity change from 0 to 2048 [ 1733.841294][T16192] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1733.895420][T16192] usb 10-1: device descriptor read/8, error -71 [ 1733.923462][T23913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1734.021460][T23927] netlink: 'syz.6.3831': attribute type 11 has an invalid length. [ 1734.180803][T16192] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1734.220075][ T937] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1734.220896][T16649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1734.271369][T16192] usb 10-1: device descriptor read/8, error -71 [ 1734.576755][T16192] usb usb10-port1: unable to enumerate USB device [ 1734.673365][ T937] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.725468][ T937] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1734.818643][T23942] /dev/sg0: Can't lookup blockdev [ 1735.053851][ T937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1735.200501][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.409710][T23944] loop3: detected capacity change from 0 to 512 [ 1735.441299][T23944] EXT4-fs: Ignoring removed oldalloc option [ 1735.469638][ T937] usbtmc 3-1:16.0: bulk endpoints not found [ 1735.514252][T23944] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1735.694775][T23944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 1735.725524][T23944] System zones: 1-12 [ 1735.758612][T23944] EXT4-fs (loop3): 1 truncate cleaned up [ 1736.003556][T23956] loop6: detected capacity change from 0 to 8 [ 1736.010924][T23944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1736.287872][T23944] loop3: detected capacity change from 512 to 64 [ 1736.705277][T16649] ------------[ cut here ]------------ [ 1736.710897][T16649] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 1736.733492][T16649] WARNING: CPU: 1 PID: 16649 at ./include/linux/fs.h:802 __ext4_iget+0x3aa2/0x4310 [ 1736.752600][T16649] Modules linked in: [ 1736.756525][T16649] CPU: 1 UID: 0 PID: 16649 Comm: syz-executor Not tainted 6.14.0-syzkaller #0 [ 1736.765828][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1736.775989][T16649] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 1736.781482][T16649] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 5b 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 1736.801289][T16649] RSP: 0018:ffffc90003957810 EFLAGS: 00010286 [ 1736.807399][T16649] RAX: 0000000000000000 RBX: ffff888079da82bc RCX: ffffffff817a2269 [ 1736.815486][T16649] RDX: ffff8880797dda00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 1736.823567][T16649] RBP: ffffc90003957960 R08: 0000000000000001 R09: 0000000000000000 [ 1736.831664][T16649] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 1736.839665][T16649] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888079da82b0 [ 1736.847755][T16649] FS: 000055556c7c0500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1736.856767][T16649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1736.863574][T16649] CR2: 00007fff54033f78 CR3: 000000006e116000 CR4: 0000000000350ef0 [ 1736.871665][T16649] Call Trace: [ 1736.874969][T16649] [ 1736.877948][T16649] ? __warn+0xea/0x3c0 [ 1736.882270][T16649] ? __ext4_iget+0x3aa2/0x4310 [ 1736.887126][T16649] ? report_bug+0x3c0/0x580 [ 1736.895833][T16649] ? handle_bug+0x54/0xa0 [ 1736.900750][T16649] ? exc_invalid_op+0x17/0x50 [ 1736.905478][T16649] ? asm_exc_invalid_op+0x1a/0x20 [ 1736.910623][T16649] ? __warn_printk+0x199/0x350 [ 1736.915437][T16649] ? __warn_printk+0x1a6/0x350 [ 1736.920316][T16649] ? __ext4_iget+0x3aa2/0x4310 [ 1736.925139][T16649] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1736.930636][T16649] ? __pfx___ext4_iget+0x10/0x10 [ 1736.935626][T16649] ? preempt_schedule_common+0x44/0xc0 [ 1736.941214][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.946916][T16649] ? kfree+0x260/0x4d0 [ 1736.951132][T16649] ? d_alloc_parallel+0xb63/0x12b0 [ 1736.956307][T16649] ext4_lookup+0x37e/0x730 [ 1736.960873][T16649] ? __pfx_ext4_lookup+0x10/0x10 [ 1736.965988][T16649] ? irqentry_exit+0x3b/0x90 [ 1736.970711][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.976426][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.982232][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1736.987943][T16649] __lookup_slow+0x252/0x470 [ 1736.992693][T16649] ? __pfx___lookup_slow+0x10/0x10 [ 1736.997863][T16649] ? walk_component+0x342/0x5b0 [ 1737.002845][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.008542][T16649] ? lookup_fast+0x153/0x5f0 [ 1737.013292][T16649] walk_component+0x350/0x5b0 [ 1737.018031][T16649] path_lookupat+0x17f/0x770 [ 1737.022761][T16649] filename_lookup+0x221/0x5f0 [ 1737.027586][T16649] ? __pfx_filename_lookup+0x10/0x10 [ 1737.033023][T16649] ? kasan_check_range+0x156/0x1a0 [ 1737.038183][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.043979][T16649] ? getname_flags.part.0+0x1c5/0x550 [ 1737.049412][T16649] user_path_at+0x3a/0x60 [ 1737.053939][T16649] __x64_sys_umount+0x10b/0x1a0 [ 1737.058850][T16649] ? __pfx___x64_sys_umount+0x10/0x10 [ 1737.064355][T16649] do_syscall_64+0xcd/0x250 [ 1737.069026][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.075019][T16649] RIP: 0033:0x7f8db9d8e497 [ 1737.079465][T16649] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1737.099272][T16649] RSP: 002b:00007fff540341d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1737.107808][T16649] RAX: ffffffffffffffda RBX: 00007f8db9e0e08c RCX: 00007f8db9d8e497 [ 1737.115879][T16649] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff54034290 [ 1737.123941][T16649] RBP: 00007fff54034290 R08: 0000000000000000 R09: 0000000000000000 [ 1737.132022][T16649] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff54035380 [ 1737.140100][T16649] R13: 00007f8db9e0e08c R14: 00000000001a7ea2 R15: 00007fff54037540 [ 1737.148127][T16649] [ 1737.151235][T16649] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1737.158559][T16649] CPU: 1 UID: 0 PID: 16649 Comm: syz-executor Not tainted 6.14.0-syzkaller #0 [ 1737.167466][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1737.177573][T16649] Call Trace: [ 1737.180872][T16649] [ 1737.183822][T16649] dump_stack_lvl+0x3d/0x1f0 [ 1737.188461][T16649] panic+0x71d/0x800 [ 1737.192397][T16649] ? __pfx_panic+0x10/0x10 [ 1737.196848][T16649] ? show_trace_log_lvl+0x29d/0x3d0 [ 1737.202108][T16649] ? check_panic_on_warn+0x1f/0xb0 [ 1737.207262][T16649] ? __ext4_iget+0x3aa2/0x4310 [ 1737.212070][T16649] check_panic_on_warn+0xab/0xb0 [ 1737.217051][T16649] __warn+0xf6/0x3c0 [ 1737.220986][T16649] ? __ext4_iget+0x3aa2/0x4310 [ 1737.225801][T16649] report_bug+0x3c0/0x580 [ 1737.230182][T16649] handle_bug+0x54/0xa0 [ 1737.234368][T16649] exc_invalid_op+0x17/0x50 [ 1737.238897][T16649] asm_exc_invalid_op+0x1a/0x20 [ 1737.243797][T16649] RIP: 0010:__ext4_iget+0x3aa2/0x4310 [ 1737.249216][T16649] Code: e8 63 07 49 ff c6 05 38 27 da 0d 01 90 8b 95 10 ff ff ff 44 89 e1 48 c7 c7 40 5b 85 8b 48 8b b5 f8 fe ff ff e8 3f 38 09 ff 90 <0f> 0b 90 90 e9 2d fd ff ff e8 d0 45 ab ff e9 f6 e6 ff ff e8 a6 44 [ 1737.268872][T16649] RSP: 0018:ffffc90003957810 EFLAGS: 00010286 [ 1737.274983][T16649] RAX: 0000000000000000 RBX: ffff888079da82bc RCX: ffffffff817a2269 [ 1737.283010][T16649] RDX: ffff8880797dda00 RSI: ffffffff817a2276 RDI: 0000000000000001 [ 1737.291054][T16649] RBP: ffffc90003957960 R08: 0000000000000001 R09: 0000000000000000 [ 1737.299054][T16649] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000001d [ 1737.307077][T16649] R13: 0000000000000000 R14: 0000000000002000 R15: ffff888079da82b0 [ 1737.315095][T16649] ? __warn_printk+0x199/0x350 [ 1737.319900][T16649] ? __warn_printk+0x1a6/0x350 [ 1737.324711][T16649] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1737.330133][T16649] ? __pfx___ext4_iget+0x10/0x10 [ 1737.335113][T16649] ? preempt_schedule_common+0x44/0xc0 [ 1737.340619][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.346308][T16649] ? kfree+0x260/0x4d0 [ 1737.350422][T16649] ? d_alloc_parallel+0xb63/0x12b0 [ 1737.355598][T16649] ext4_lookup+0x37e/0x730 [ 1737.360073][T16649] ? __pfx_ext4_lookup+0x10/0x10 [ 1737.365103][T16649] ? irqentry_exit+0x3b/0x90 [ 1737.369738][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.375453][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.381156][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.386854][T16649] __lookup_slow+0x252/0x470 [ 1737.391492][T16649] ? __pfx___lookup_slow+0x10/0x10 [ 1737.396653][T16649] ? walk_component+0x342/0x5b0 [ 1737.401570][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.407263][T16649] ? lookup_fast+0x153/0x5f0 [ 1737.411906][T16649] walk_component+0x350/0x5b0 [ 1737.416631][T16649] path_lookupat+0x17f/0x770 [ 1737.421272][T16649] filename_lookup+0x221/0x5f0 [ 1737.426087][T16649] ? __pfx_filename_lookup+0x10/0x10 [ 1737.431450][T16649] ? kasan_check_range+0x156/0x1a0 [ 1737.436612][T16649] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1737.442305][T16649] ? getname_flags.part.0+0x1c5/0x550 [ 1737.447733][T16649] user_path_at+0x3a/0x60 [ 1737.452120][T16649] __x64_sys_umount+0x10b/0x1a0 [ 1737.457040][T16649] ? __pfx___x64_sys_umount+0x10/0x10 [ 1737.462477][T16649] do_syscall_64+0xcd/0x250 [ 1737.467042][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.472987][T16649] RIP: 0033:0x7f8db9d8e497 [ 1737.477435][T16649] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1737.497106][T16649] RSP: 002b:00007fff540341d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1737.505575][T16649] RAX: ffffffffffffffda RBX: 00007f8db9e0e08c RCX: 00007f8db9d8e497 [ 1737.513583][T16649] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff54034290 [ 1737.521584][T16649] RBP: 00007fff54034290 R08: 0000000000000000 R09: 0000000000000000 [ 1737.529578][T16649] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff54035380 [ 1737.537581][T16649] R13: 00007f8db9e0e08c R14: 00000000001a7ea2 R15: 00007fff54037540 [ 1737.545619][T16649] [ 1737.548781][T16649] Kernel Offset: disabled [ 1737.553208][T16649] Rebooting in 86400 seconds..