last executing test programs: 2m11.712269675s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x70, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xcb, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e2d91248abe2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x9, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0xfc1c, 0x24}, @country_functional={0xe, 0x24, 0x7, 0x93, 0x0, [0x100, 0x7, 0x0, 0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1a, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x1, 0x18}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xff, 0x8, 0x2, 0x8, 0x6}, 0x36, &(0x7f00000002c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x30, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xf00, 0x1000, [0x30, 0x30, 0xff00c0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc6, 0x7f, 0x80, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0xac, &(0x7f0000000880)=@string={0xac, 0x3, "de013f0df29ee0dec3835a9bb4a20eae634dbd4c3302893913dcac06378adc500c142bcf352c31decc3183b1847bddbce8b8b4fb197c27dfffb01513a160607e67a0fb1b67253430b8623dcf070c47e06efa66cf22c05a6a0ee8bea240d367f55e014c5911c2e076392fe3ea9762fb15ac027e24747b33992aec020dcb65858792dfdae8d4b191963f6cd15c6300978e8a236c434affd6289382b7aa1df992986b099cab393af58e9261"}}, {0x4, &(0x7f0000000940)=@string={0x4, 0x3, "d10a"}}, {0x83, &(0x7f0000000980)=@string={0x83, 0x3, "36801464b125d5755bdd3145af2a6ae58c560d6d870069bc24942ff5e021ddfbac483a83bfdfdc3a190ef55a8cf1b51730d277319a703f35792739da61e42c361361163c13dec9f6981f43247345e167a42f702dcca0efe02df40f893795e319203a49c29eb311328b3c0351eed20c372ab50ada84e0f54bae041f8917e960dce5"}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x0, 0x14, 0x47, {0x47, 0xc, "82ac19710c7709374fc3bcd9ae091c467bb821e1b111dcb8b7f3d5cfec2886dfd3a801aae9082237d529de72541e1ad5a6535cdb735e4b5ff91168d450acd14257875dae89"}}, &(0x7f0000000b40)={0x0, 0x3, 0x72, @string={0x72, 0x3, "6d28bffdd3b7382fab26aaadf7d604fcb47dd143c3f931b19dc3c9f4af1805e3a74e310b03456bec677f1e16d0b491243fc9db8c41685878ee47a4d3dbe6ed5cb1c046c26fa9535075f56693acc6b697a9189ab89b19d8b05fe0375a1e08000000000700"/112}}, &(0x7f0000000c40)={0x0, 0xf, 0xa5, {0x5, 0xf, 0xa5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xffe153132654ceac, 0x3, 0x4, 0xf801}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "af063413262353d2581d9d1615ba4047"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x6, 0x101}, @generic={0x7b, 0x10, 0xb, "c47a9edf6d91b771536d87eebdf90440d9b5a947abef9dbe6f81b1ef3c35f6c9c7a8ce8075acae2eb17d55c98cfe13d2f3a1f7312d5f41c5c4d38d62d01120eba82923421f9edf1d9c604711413415a2b0c5bf1fd1a708fee4ad62f7c79ad0a9644df04076eb2e300c0dab0862a9dae0276a2a0a870ab456"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x40, "2118be17", "a1c45893"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x5, 0x4, 0x4000, 0x3c3}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x61, "c0287540d50e3aaf029c44021631083b183ca23695413aa95bdb777f8e0691e1a885c60ae5d7926b8734fc293fac28c7ad45d2ec69b825e8b173e1dabcfef2b2952fc7253cac31b1c220c8e758268aa1c25231c111351f34267c4c0a084ad6d1f7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9571"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x58}, &(0x7f0000001040)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e159"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000053d000/0x1000)=nil, 0x1000, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x17) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000700)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f0000000600)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) socket$netlink(0x10, 0x3, 0x4) 2m5.491457674s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 2m0.697815946s ago: executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x147c42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) link(&(0x7f0000001240)='./bus\x00', &(0x7f0000000bc0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083008000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1m57.335417002s ago: executing program 3: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9) 1m54.256748868s ago: executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0xe, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000700)={r3}) 1m54.244416787s ago: executing program 4: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000006140)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff01}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1, 0xbef, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9faea1f120ff000"/44, @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB, @ANYRESDEC=r5], 0x2, 0x1e7, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) mkdir(0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) 1m48.082960248s ago: executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=0x3, 0x4) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='btrfs_handle_em_exist\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000080000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x2}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r5 = dup(r3) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r5, r6, 0x0) 1m45.618885991s ago: executing program 4: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x9) 1m45.617962566s ago: executing program 5: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) dup3(r6, r5, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x541b, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m42.909520779s ago: executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x9, 0x1) 1m41.636625751s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioprio_get$pid(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x9, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x1}}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) tee(r4, 0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m30.127602973s ago: executing program 5: syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) open(&(0x7f0000000340)='./bus\x00', 0x8e046, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6ffff5d29c3ee5e5ca9000f7c41f7adc9a3ebbc50fdc660ee77df701908b9aaa3f6a005b230f400", "f8208406780820d1cbf7896de100cf00000000000000cf71011bbdb70f000000090080000000000000000000040000e7291f00", "b7320900181c1f0000000000b9000000000000000000f0fffffffff2ff00"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60001c, 0x0) 1m28.181858232s ago: executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 1m23.056863342s ago: executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r0 = fsmount(0xffffffffffffffff, 0xd557cc49d0f1df14, 0x86) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x0, 0xc9, 0x5}}}, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x1d}}}, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "a1ba55"}}}, 0xd) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 1m20.840465116s ago: executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x9, 0x1) 1m18.384056155s ago: executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 1m17.835000828s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 1m17.041488842s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) futex(&(0x7f000000cffc), 0xc, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = syz_usb_connect$cdc_ecm(0x6, 0x70, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0xcb, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x0, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e2d91248abe2"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x9, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0xfc1c, 0x24}, @country_functional={0xe, 0x24, 0x7, 0x93, 0x0, [0x100, 0x7, 0x400, 0x81]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1a, 0x0, 0x2d}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x40, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xfd, 0x1, 0x18}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0xff, 0x8, 0x2, 0x8, 0x6}, 0x36, &(0x7f00000002c0)={0x5, 0xf, 0x36, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7f, 0x30, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x4, 0xf00, 0x1000, [0x30, 0x30, 0xff00c0, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0x0, 0xc6, 0x7f, 0x80, 0x2, 0x1}]}, 0x4, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x448}}, {0xac, &(0x7f0000000880)=@string={0xac, 0x3, "de013f0df29ee0dec3835a9bb4a20eae634dbd4c3302893913dcac06378adc500c142bcf352c31decc3183b1847bddbce8b8b4fb197c27dfffb01513a160607e67a0fb1b67253430b8623dcf070c47e06efa66cf22c05a6a0ee8bea240d367f55e014c5911c2e076392fe3ea9762fb15ac027e24747b33992aec020dcb65858792dfdae8d4b191963f6cd15c6300978e8a236c434affd6289382b7aa1df992986b099cab393af58e9261"}}, {0x4, &(0x7f0000000940)=@string={0x4, 0x3, "d10a"}}, {0x83, &(0x7f0000000980)=@string={0x83, 0x3, "36801464b125d5755bdd3145af2a6ae58c560d6d870069bc24942ff5e021ddfbac483a83bfdfdc3a190ef55a8cf1b51730d277319a703f35792739da61e42c361361163c13dec9f6981f43247345e167a42f702dcca0efe02df40f893795e319203a49c29eb311328b3c0351eed20c372ab50ada84e0f54bae041f8917e960dce5"}}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') syz_usb_control_io(r3, &(0x7f0000000d80)={0x2c, &(0x7f0000000ac0)={0x0, 0x14, 0x47, {0x47, 0xc, "82ac19710c7709374fc3bcd9ae091c467bb821e1b111dcb8b7f3d5cfec2886dfd3a801aae9082237d529de72541e1ad5a6535cdb735e4b5ff91168d450acd14257875dae89"}}, &(0x7f0000000b40)={0x0, 0x3, 0x72, @string={0x72, 0x3, "6d28bffdd3b7382fab26aaadf7d604fcb47dd143c3f931b19dc3c9f4af1805e3a74e310b03456bec677f1e16d0b491243fc9db8c41685878ee47a4d3dbe6ed5cb1c046c26fa9535075f56693acc6b697a9189ab89b19d8b05fe0375a1e08000000000700"/112}}, &(0x7f0000000c40)={0x0, 0xf, 0xa5, {0x5, 0xf, 0xa5, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xffe153132654ceac, 0x3, 0x4, 0xf801}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "af063413262353d2581d9d1615ba4047"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x4, 0x6, 0x101}, @generic={0x7b, 0x10, 0xb, "c47a9edf6d91b771536d87eebdf90440d9b5a947abef9dbe6f81b1ef3c35f6c9c7a8ce8075acae2eb17d55c98cfe13d2f3a1f7312d5f41c5c4d38d62d01120eba82923421f9edf1d9c604711413415a2b0c5bf1fd1a708fee4ad62f7c79ad0a9644df04076eb2e300c0dab0862a9dae0276a2a0a870ab456"}]}}, &(0x7f0000000d00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x80, 0x40, "2118be17", "a1c45893"}}, &(0x7f0000000d40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x9, 0x5, 0x4, 0x4000, 0x3c3}}}, &(0x7f0000001200)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x61, "c0287540d50e3aaf029c44021631083b183ca23695413aa95bdb777f8e0691e1a885c60ae5d7926b8734fc293fac28c7ad45d2ec69b825e8b173e1dabcfef2b2952fc7253cac31b1c220c8e758268aa1c25231c111351f34267c4c0a084ad6d1f7"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000e80)={0x0, 0x8, 0x1}, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000f00)={0x20, 0x0, 0x4, {0x0, 0x8}}, &(0x7f0000000f40)={0x40, 0x7, 0x2}, &(0x7f0000000f80)={0x40, 0x9, 0x1}, &(0x7f0000000fc0)={0x40, 0xb, 0x2, "9571"}, &(0x7f0000001000)={0x40, 0xf, 0x2, 0x58}, &(0x7f0000001040)={0x40, 0x13, 0x6, @local}, 0x0, &(0x7f00000010c0)={0x40, 0x19, 0x2, "e159"}, &(0x7f0000001100)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000001140)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001180)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000011c0)={0x40, 0x21, 0x1, 0x7}}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000053d000/0x1000)=nil, 0x1000, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x17) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000700)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f0000000600)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) socket$netlink(0x10, 0x3, 0x4) 54.388918759s ago: executing program 0: chdir(0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c62) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 54.299750481s ago: executing program 1: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x480, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 54.172760078s ago: executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) dup3(r6, r5, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x541b, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 53.27290653s ago: executing program 0: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000009c0)="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", 0xfffffd40) 53.054110512s ago: executing program 1: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002b80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000006140)={0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1, 0xbef, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fstat(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9faea1f120ff000"/44, @ANYBLOB="3d8bf0955e571ed85bd72e40205496ed401eb01ba54c3a2ec565f6baf4011d1b6cc3e2148ed1e5742b70b7409b2460a9be8fe02bac9b630c48cf798f3207221bed5de4094c4ebd7a2cdc494ddb81193e47564a211318914f329065e640ff2cf61a6e5349e87ecdebe642ac1c9835c4f21328f118150a5eb2563fe4e1823b44bf87a12fe02c4be98933fc52966076dd4291f7358e1064699e51ed1c7be6fc8025f11f070c046f1b8cfc0bb68626fd9ed953f649f076d424c8ee174c3ce621d7ff7590627456bc7f70e3032aeac220dbb80d90faf3fc7cd456509ae07490b5bdaf4d4cee6f8ffc42bf695b4347b86b974164b66ad7d3c9679ea39ccbafb4c9a59af225a554efa29705b53c68aa4eeefc91f426622ce179b05af831685555f7db74debc15abb501552dcf890bae5a1f", @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYBLOB, @ANYRESDEC=r5], 0x2, 0x1e7, &(0x7f00000001c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) 51.739106262s ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004}, &(0x7f0000bbdffc)) ioprio_get$pid(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x9, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x1}}, 0x18) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) tee(r4, 0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 49.511835331s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 49.412781005s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x9, 0x1) 48.455867875s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110a38b410000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x1, 0x9, 0xff, 0x9}, {0x83, 0x0, 0x5, 0x3}, {0x8, 0x80, 0x6, 0x3}, {0xfff9, 0x80, 0x4, 0xc573}, {0x20, 0x4, 0xcc, 0x9}, {0x1, 0x4, 0x5, 0xfffffffb}, {0xff, 0x81, 0xf9, 0x9}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8520006deb000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$btrfs(&(0x7f00000005c0), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000280)={[{@acl}, {@noautodefrag}, {@nobarrier}, {@noautodefrag}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nospace_cache}, {@usebackuproot}]}, 0x1, 0x50ed, &(0x7f000000a2c0)="$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") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="4cfaac00", @ANYRES16=r3, @ANYBLOB="200026bd7000fbdbdf250d00000005001d000300000005001a00070000000500170005000000060008000000000005001d000c00000005001900010000000500070010000000"], 0x4c}}, 0x4000000) r4 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) prctl$PR_MCE_KILL(0x23, 0x5, 0x7fffffffeffe) r5 = syz_open_dev$dri(&(0x7f0000000740), 0x1ff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000003c40), 0x9237, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000001cc0)='1', 0x1, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x1}]}, {0x0, [0x5f, 0x5f, 0x7f]}}, 0x0, 0x29}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000080)={r7, 0x97, &(0x7f0000000140)=""/151}) 45.831001599s ago: executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x10, 0x97, 0x37, 0x10, 0x77d, 0x410, 0xecc1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x40, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x37, 0x24, 0x34}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x401c5820, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) openat$mice(0xffffffffffffff9c, &(0x7f0000000900), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$char_usb(r1, &(0x7f0000000280)="19", 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000001000000000c000000020000000000000000000006040000000000"], &(0x7f0000000000)=""/197, 0x26, 0xc5, 0x1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x0, 0xbf25}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f00000000c0), 0x20000000}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000880), 0x12) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073013200000000009500000000000000f523bc128e9d16330ff66aeaf3e1eae3fa41706376ae6c4aad19d53374e70747f5be3d456fe606a2417867c12a57250d2daca3d997deb2914913950e454bffb31d87509d476d5590"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) 35.149760086s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x7}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='xen_mmu_flush_tlb_multi\x00'}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB], 0xc0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000100)=[{0x25, 0x1, 0x1, 0xfffffffc}, {}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) sendto$inet6(r3, &(0x7f0000000480), 0x0, 0x4080, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x0, 0x2, 0x80, 0x7f, 0x49, @empty, @mcast2, 0x7881, 0x8, 0x80000001, 0x4}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0505405, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 33.907510683s ago: executing program 2: socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x46) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_secret(0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r6, &(0x7f0000000000)=""/24, 0x18) getdents64(r6, &(0x7f0000000140)=""/56, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents64(r6, &(0x7f0000000080)=""/151, 0x97) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) 32.945535687s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r6 = add_key$user(0x0, &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800), 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r6}, &(0x7f0000001400)=""/86, 0x56, &(0x7f00000000c0)={&(0x7f0000000100)={'crct10dif-generic\x00'}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, &(0x7f00000002c0)=0x10) 31.728970715s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioprio_get$pid(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x9, 0x1) 30.032912421s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @generic={0x0, 0x0, 0x0, 0x2, 0x7}, @alu={0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f00000002c0)='GPL\x00', 0x2, 0x8c, &(0x7f0000000540)=""/140, 0x41000, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x8, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x10, 0xed}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map, 0x14, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)={@map, r2, 0x5, 0x2024, 0x0, @prog_id, r3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0x10, 0x0, 0xffffffffffffffff, @link_id, r3}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe9d) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x1b, 0xa, &(0x7f00000018c0)=@raw=[@generic={0xa7, 0x5, 0x4, 0x2, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @generic={0x0, 0x1, 0x4, 0x200, 0x4}, @generic={0xfe, 0x9, 0x6, 0x81, 0xecf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000001940)='GPL\x00', 0x2, 0x13, &(0x7f0000001980)=""/19, 0x41000, 0x40, '\x00', r4, 0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001ac0)={0x3, 0x9, 0xfffffffa, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000001b80)=[r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001bc0)=[{0x4, 0x4, 0xe, 0x7}, {0x4, 0x2, 0x1, 0x4}], 0x10, 0x6}, 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) 18.419207937s ago: executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x0) fallocate(r7, 0x0, 0x0, 0x1000f4) dup3(r6, r5, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r8, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r9, 0x541b, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 15.791509199s ago: executing program 0: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000e40)="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", 0x480, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 0s ago: executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000001bc0)={&(0x7f0000000440)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@rdma_dest={0x18}], 0x18}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) link(&(0x7f0000001240)='./bus\x00', &(0x7f0000000bc0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083008000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) socket(0x10, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) kernel console output (not intermixed with test programs): ID 50:50:50:50:50:50 [ 82.968800][ T947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.690380][ T947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.743815][ T947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.197231][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.208902][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.218931][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.229501][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.239629][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.250165][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.264042][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.277180][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.298740][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.313942][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.337427][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.362567][ T2804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.402042][ T2804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.418957][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.430684][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.442435][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.453023][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.463831][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.474769][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.486643][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.497248][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.507799][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.518396][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.538095][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.610450][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.626899][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.642393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.664939][ T5129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.674464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.707824][ T5129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.737504][ T5129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.748031][ T5129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.915577][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.987346][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.133224][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.160686][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.268007][ T2831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.282092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.291298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.367163][ T2831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.412354][ T5243] random: crng reseeded on system resumption [ 85.567182][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.612176][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.623306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.844811][ T780] cfg80211: failed to load regulatory.db [ 87.740698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.152998][ T780] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.172253][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.173243][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.364316][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 88.368372][ T780] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 88.376379][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 88.384753][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 88.419854][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.434045][ T780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.503486][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 88.518827][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.547706][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 88.560451][ T780] usb 1-1: string descriptor 0 read error: -71 [ 88.568147][ T780] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 88.592233][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.622260][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.641956][ T780] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 88.689137][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.713320][ T5263] random: crng reseeded on system resumption [ 88.742798][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 88.770160][ T780] usb 1-1: config 0 descriptor?? [ 88.771935][ T25] usb 5-1: config 0 descriptor?? [ 88.789726][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.800455][ T780] usb 1-1: can't set config #0, error -71 [ 88.870202][ T780] usb 1-1: USB disconnect, device number 2 [ 89.370214][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 89.406869][ T9] usbtmc 4-1:16.0: can't read capabilities [ 89.665715][ T5226] usb 4-1: USB disconnect, device number 2 [ 89.793782][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 89.808899][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 89.834540][ T25] usb 5-1: USB disconnect, device number 2 [ 90.410176][ T5290] loop3: detected capacity change from 0 to 512 [ 90.443099][ T5290] EXT4-fs: Ignoring removed nobh option [ 90.552899][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 90.572543][ T5290] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 90.592057][ T5290] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 90.622055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.630660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.852824][ T5290] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 90.883433][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.273096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.075557][ T5304] loop5: detected capacity change from 0 to 256 [ 92.225520][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 92.783389][ T5308] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 92.832847][ T5304] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 92.903072][ T5294] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.925261][ T5305] random: crng reseeded on system resumption [ 92.983904][ T5309] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.034753][ T5311] loop2: detected capacity change from 0 to 4096 [ 93.059088][ T5312] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.119403][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.234068][ T5308] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.259678][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.290566][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.303977][ T5290] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 93.324220][ T5315] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.488258][ T5131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.291813][ T5118] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.380745][ T5326] random: crng reseeded on system resumption [ 94.405027][ T5325] loop5: detected capacity change from 0 to 2048 [ 94.491816][ T5118] usb 5-1: Using ep0 maxpacket: 8 [ 94.522085][ T5118] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 94.741224][ T5118] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 95.641868][ T5118] usb 5-1: config 0 has no interface number 0 [ 95.648049][ T5118] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.839439][ T5118] usb 5-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.994009][ T5118] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 97.054022][ T5118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.119692][ T5118] usb 5-1: config 0 descriptor?? [ 97.143129][ T5118] usb 5-1: can't set config #0, error -71 [ 97.188763][ T5118] usb 5-1: USB disconnect, device number 3 [ 98.858228][ T5226] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.025323][ T5361] loop3: detected capacity change from 0 to 512 [ 99.159200][ T5361] EXT4-fs: Ignoring removed nobh option [ 99.587792][ T29] audit: type=1804 audit(1718920031.055:2): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/5/bus" dev="sda1" ino=1973 res=1 errno=0 [ 99.831615][ T5365] overlay: ./bus is not a directory [ 100.462728][ T29] audit: type=1804 audit(1718920031.055:3): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/5/bus" dev="sda1" ino=1973 res=1 errno=0 [ 100.504041][ T29] audit: type=1804 audit(1718920031.055:4): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/5/bus" dev="sda1" ino=1973 res=1 errno=0 [ 100.529556][ T29] audit: type=1804 audit(1718920031.065:5): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/5/bus" dev="sda1" ino=1973 res=1 errno=0 [ 100.555918][ T5226] usb 6-1: device descriptor read/all, error -71 [ 100.643879][ T5361] fscrypt_msg: 11 callbacks suppressed [ 100.643902][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.711290][ T5361] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 100.767617][ T5361] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 100.797956][ T5361] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 100.822707][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.902061][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.916278][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.925269][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.933941][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.942921][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 100.972785][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 101.003059][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 101.016761][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 101.034533][ T5361] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 101.177420][ T5384] loop1: detected capacity change from 0 to 1764 [ 101.191290][ T5386] loop4: detected capacity change from 0 to 128 [ 101.363365][ T5131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.480975][ T25] IPVS: starting estimator thread 0... [ 101.602081][ T5390] IPVS: using max 22 ests per chain, 52800 per kthread [ 101.613792][ T5384] loop1: detected capacity change from 0 to 128 [ 101.658003][ T5384] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 101.716071][ T5384] sysv_free_block: trying to free block not in datazone [ 103.282695][ T5403] loop3: detected capacity change from 0 to 128 [ 103.663439][ T5408] loop2: detected capacity change from 0 to 2048 [ 103.746588][ T5405] loop0: detected capacity change from 0 to 2048 [ 103.776612][ T5408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.814402][ T9] IPVS: starting estimator thread 0... [ 103.869058][ T5405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.932224][ T5405] ext4 filesystem being mounted at /root/syzkaller-testdir1556852694/syzkaller.WaEjkO/7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.953574][ T5417] IPVS: using max 16 ests per chain, 38400 per kthread [ 103.963845][ T5121] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.041995][ T5228] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 104.378719][ T5125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.435179][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.492085][ T5228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 105.510182][ T5228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 105.530148][ T5228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.556011][ T5228] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.583298][ T5228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.600496][ T5228] usb 6-1: config 0 descriptor?? [ 105.835363][ T5428] random: crng reseeded on system resumption [ 105.938252][ T5426] loop1: detected capacity change from 0 to 4096 [ 105.972371][ T5426] ntfs3: Unknown parameter '' [ 106.051056][ T5228] usbhid 6-1:0.0: can't add hid device: -71 [ 106.073588][ T5269] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 106.087200][ T5228] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 106.122232][ T5228] usb 6-1: USB disconnect, device number 4 [ 106.192655][ T5411] loop4: detected capacity change from 0 to 32768 [ 106.270293][ T5411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (5411) [ 106.330917][ T29] audit: type=1800 audit(1718920037.825:6): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1962 res=0 errno=0 [ 106.513598][ T5411] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.539610][ T5411] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 106.554529][ T5411] BTRFS info (device loop4): using free-space-tree [ 106.634033][ T5441] loop0: detected capacity change from 0 to 512 [ 106.649995][ T5441] EXT4-fs: Ignoring removed nobh option [ 106.664042][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 106.703398][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 106.742395][ T5441] fscrypt_msg: 11 callbacks suppressed [ 106.742419][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 106.747649][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 106.833007][ T5441] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 106.878346][ T5441] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #13: comm syz-executor.0: casefold flag without casefold feature [ 106.907210][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 106.907772][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 106.944220][ T5441] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 13 (err -117) [ 106.997114][ T5441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.026447][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 107.027811][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 107.039632][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 107.076977][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.107515][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 107.108256][ T5411] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 107.149901][ T5411] BTRFS error (device loop4): open_ctree failed [ 107.205776][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.252361][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.275325][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.332888][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.344201][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.344655][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.345131][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.348176][ T5441] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.474139][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.476128][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.706614][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 107.758487][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 107.777278][ T9] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 107.815996][ T9] usb 4-1: config 0 has no interface number 0 [ 107.841238][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.091907][ T29] audit: type=1800 audit(1718920039.585:7): pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 109.076424][ T9] usb 4-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 109.126209][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 109.194435][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.270421][ T5474] loop5: detected capacity change from 0 to 128 [ 109.283169][ T9] usb 4-1: config 0 descriptor?? [ 109.317538][ T9] usb 4-1: can't set config #0, error -71 [ 109.375673][ T9] usb 4-1: USB disconnect, device number 3 [ 110.711445][ T25] IPVS: starting estimator thread 0... [ 110.831823][ T5494] IPVS: using max 22 ests per chain, 52800 per kthread [ 111.018956][ T5502] loop0: detected capacity change from 0 to 4096 [ 111.746478][ T5507] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.096612][ T5510] loop4: detected capacity change from 0 to 2048 [ 115.193116][ T5510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.352052][ T5510] ext4 filesystem being mounted at /root/syzkaller-testdir203175817/syzkaller.uFiMnR/9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.692202][ T5523] Zero length message leads to an empty skb [ 119.420376][ T5129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.978835][ T5541] loop0: detected capacity change from 0 to 32768 [ 119.992691][ T5543] loop1: detected capacity change from 0 to 16 [ 120.055337][ T5543] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.091164][ T5543] syz-executor.1: attempt to access beyond end of device [ 120.091164][ T5543] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 120.113482][ T5543] syz-executor.1: attempt to access beyond end of device [ 120.113482][ T5543] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 120.132612][ T5543] syz-executor.1: attempt to access beyond end of device [ 120.132612][ T5543] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 120.147679][ T5543] syz-executor.1: attempt to access beyond end of device [ 120.147679][ T5543] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 121.840997][ T5541] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 121.856640][ T5541] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 122.334439][ T5541] bcachefs (loop0): alloc_read... done [ 122.340569][ T5541] bcachefs (loop0): stripes_read... done [ 122.346535][ T5541] bcachefs (loop0): snapshots_read... done [ 122.361376][ T5541] bcachefs (loop0): journal_replay... done [ 122.367536][ T5541] bcachefs (loop0): resume_logged_ops... done [ 122.388358][ T5541] bcachefs (loop0): going read-write [ 122.441800][ T5541] bcachefs (loop0): done starting filesystem [ 123.131803][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.364980][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 123.442925][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.481462][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.541161][ T25] usb 2-1: config 0 descriptor?? [ 123.579111][ T25] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 123.844824][ T5566] loop2: detected capacity change from 0 to 32768 [ 123.992655][ T29] audit: type=1326 audit(1718920055.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5578 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa69bc7cf29 code=0x0 [ 124.042784][ T5566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5566) [ 124.810122][ T5566] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 124.900873][ T5566] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 124.940570][ T5566] BTRFS info (device loop2): using free-space-tree [ 125.403826][ T29] audit: type=1804 audit(1718920056.875:9): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/12/bus" dev="sda1" ino=1959 res=1 errno=0 [ 125.451746][ T5607] overlay: ./bus is not a directory [ 125.598722][ T5566] BTRFS error (device loop2): open_ctree failed [ 125.609249][ T29] audit: type=1804 audit(1718920056.885:10): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/12/bus" dev="sda1" ino=1959 res=1 errno=0 [ 125.865450][ T29] audit: type=1804 audit(1718920056.895:11): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/12/bus" dev="sda1" ino=1959 res=1 errno=0 [ 125.940884][ T29] audit: type=1804 audit(1718920056.895:12): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/12/bus" dev="sda1" ino=1959 res=1 errno=0 [ 125.991355][ T5178] usb 2-1: USB disconnect, device number 2 [ 126.422481][ T5600] loop3: detected capacity change from 0 to 256 [ 126.572883][ T29] audit: type=1804 audit(1718920058.055:13): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/18/bus" dev="sda1" ino=1953 res=1 errno=0 [ 126.921005][ T29] audit: type=1804 audit(1718920058.055:14): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/18/bus" dev="sda1" ino=1953 res=1 errno=0 [ 127.077871][ T5585] loop5: detected capacity change from 0 to 32768 [ 127.093668][ T29] audit: type=1804 audit(1718920058.065:15): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/18/bus" dev="sda1" ino=1953 res=1 errno=0 [ 127.142584][ T5585] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz-executor.5 (5585) [ 127.366044][ T29] audit: type=1804 audit(1718920058.065:16): pid=5617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/18/bus" dev="sda1" ino=1953 res=1 errno=0 [ 127.554600][ T5115] bcachefs (loop0): shutting down [ 127.601484][ T5115] bcachefs (loop0): going read-only [ 127.660969][ T5115] bcachefs (loop0): finished waiting for writes to stop [ 127.718430][ T5115] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 127.789951][ T5115] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 128.073984][ T5115] bcachefs (loop0): shutdown complete, journal seq 12 [ 128.115696][ T5115] bcachefs (loop0): marking filesystem clean [ 128.438197][ T5628] loop1: detected capacity change from 0 to 4096 [ 128.569557][ T5637] loop4: detected capacity change from 0 to 16 [ 129.379204][ T5637] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.390577][ T5636] syz-executor.4: attempt to access beyond end of device [ 129.390577][ T5636] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 129.404765][ T5636] syz-executor.4: attempt to access beyond end of device [ 129.404765][ T5636] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 129.423402][ T5636] syz-executor.4: attempt to access beyond end of device [ 129.423402][ T5636] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 129.437508][ T5636] syz-executor.4: attempt to access beyond end of device [ 129.437508][ T5636] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 129.767939][ T5639] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.028268][ T5115] bcachefs (loop0): shutdown complete [ 130.247313][ T29] audit: type=1326 audit(1718920061.745:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b4a7cf29 code=0x0 [ 131.321935][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.402083][ T5654] loop4: detected capacity change from 0 to 2048 [ 131.553684][ T5654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.695013][ T5654] ext4 filesystem being mounted at /root/syzkaller-testdir203175817/syzkaller.uFiMnR/16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.002529][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 132.019082][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 132.028964][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.044682][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.053982][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.904190][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.918133][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.919743][ T9] usb 4-1: config 0 descriptor?? [ 133.144773][ T5129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.161825][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 133.168814][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 133.497786][ T5673] loop3: detected capacity change from 0 to 32768 [ 133.515322][ T9] usb 4-1: USB disconnect, device number 4 [ 133.784228][ T5673] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 133.799756][ T5673] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 134.016932][ T5673] bcachefs (loop3): alloc_read... done [ 134.022926][ T5673] bcachefs (loop3): stripes_read... done [ 134.030810][ T5673] bcachefs (loop3): snapshots_read... done [ 134.039989][ T5673] bcachefs (loop3): journal_replay... done [ 134.045951][ T5673] bcachefs (loop3): resume_logged_ops... done [ 134.161260][ T29] audit: type=1804 audit(1718920065.615:18): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/17/bus" dev="sda1" ino=1972 res=1 errno=0 [ 134.218627][ T5673] bcachefs (loop3): going read-write [ 134.254131][ T5673] bcachefs (loop3): done starting filesystem [ 134.284508][ T29] audit: type=1804 audit(1718920065.625:19): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/17/bus" dev="sda1" ino=1972 res=1 errno=0 [ 134.651780][ T29] audit: type=1804 audit(1718920065.625:20): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/17/bus" dev="sda1" ino=1972 res=1 errno=0 [ 134.769722][ T29] audit: type=1804 audit(1718920065.635:21): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/17/bus" dev="sda1" ino=1972 res=1 errno=0 [ 137.451951][ T29] audit: type=1326 audit(1718920068.125:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5711 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b4a7cf29 code=0x0 [ 137.823641][ T5721] random: crng reseeded on system resumption [ 138.432079][ T5131] bcachefs (loop3): shutting down [ 138.465771][ T5131] bcachefs (loop3): going read-only [ 138.484919][ T5131] bcachefs (loop3): finished waiting for writes to stop [ 138.627774][ T5131] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11 [ 138.811825][ T5131] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11 [ 138.967583][ T5131] bcachefs (loop3): shutdown complete, journal seq 12 [ 139.025176][ T5131] bcachefs (loop3): marking filesystem clean [ 139.320095][ T5131] bcachefs (loop3): shutdown complete [ 140.818208][ T29] audit: type=1804 audit(1718920072.285:23): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/23/bus" dev="sda1" ino=1947 res=1 errno=0 [ 140.996553][ T29] audit: type=1804 audit(1718920072.285:24): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/23/bus" dev="sda1" ino=1947 res=1 errno=0 [ 141.074973][ T29] audit: type=1804 audit(1718920072.285:25): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/23/bus" dev="sda1" ino=1947 res=1 errno=0 [ 141.102082][ T5174] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.189459][ T29] audit: type=1804 audit(1718920072.285:26): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/23/bus" dev="sda1" ino=1947 res=1 errno=0 [ 141.325690][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 141.339289][ T5174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 141.363803][ T5174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.408800][ T5174] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.423355][ T5174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.454688][ T5174] usb 1-1: config 0 descriptor?? [ 141.631925][ T5174] usbhid 1-1:0.0: can't add hid device: -71 [ 141.667292][ T5174] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 141.723950][ T5174] usb 1-1: USB disconnect, device number 3 [ 144.661560][ T29] audit: type=1326 audit(1718920076.155:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1b4a7cf29 code=0x0 [ 146.163260][ T5776] loop4: detected capacity change from 0 to 32768 [ 147.139878][ T5776] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 147.158439][ T5776] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 148.775963][ T5776] bcachefs (loop4): alloc_read... done [ 148.781546][ T5776] bcachefs (loop4): stripes_read... done [ 148.787347][ T5776] bcachefs (loop4): snapshots_read... done [ 148.796547][ T5776] bcachefs (loop4): journal_replay... done [ 148.802509][ T5776] bcachefs (loop4): resume_logged_ops... done [ 148.816741][ T5776] bcachefs (loop4): going read-write [ 148.835836][ T5776] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 148.850341][ T5776] bcachefs (loop4): error starting copygc thread [ 148.859872][ T5776] bcachefs (loop4): going read-only [ 148.865242][ T5776] bcachefs (loop4): finished waiting for writes to stop [ 148.874677][ T5776] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 148.883749][ T5776] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 148.985980][ T5776] bcachefs (loop4): shutdown complete, journal seq 11 [ 148.993867][ T5776] bcachefs (loop4): marking filesystem clean [ 149.011081][ T5776] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 149.019466][ T5776] bcachefs (loop4): shutting down [ 149.112835][ T5776] bcachefs (loop4): shutdown complete [ 149.606478][ T5808] loop1: detected capacity change from 0 to 4096 [ 149.716831][ T29] audit: type=1804 audit(1718920081.205:28): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/27/bus" dev="sda1" ino=1960 res=1 errno=0 [ 149.840664][ T5817] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.139954][ T29] audit: type=1804 audit(1718920081.205:29): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/27/bus" dev="sda1" ino=1960 res=1 errno=0 [ 151.153611][ T29] audit: type=1804 audit(1718920081.205:30): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/27/bus" dev="sda1" ino=1960 res=1 errno=0 [ 151.214932][ T5814] loop5: detected capacity change from 0 to 4096 [ 151.434167][ T29] audit: type=1804 audit(1718920081.205:31): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/27/bus" dev="sda1" ino=1960 res=1 errno=0 [ 151.523170][ T5824] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.092642][ T5837] loop1: detected capacity change from 0 to 512 [ 152.111041][ T5837] EXT4-fs: Ignoring removed i_version option [ 152.117696][ T5837] EXT4-fs: Ignoring removed nobh option [ 152.124873][ T5837] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.176571][ T5837] EXT4-fs (loop1): failed to initialize system zone (-117) [ 152.208832][ T5837] EXT4-fs (loop1): mount failed [ 152.638629][ T29] audit: type=1326 audit(1718920084.125:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f807cf29 code=0x0 [ 153.956312][ T29] audit: type=1326 audit(1718920085.425:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f807cf29 code=0x0 [ 154.171702][ C1] hrtimer: interrupt took 61420 ns [ 155.110770][ T29] audit: type=1326 audit(1718920086.575:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5871 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f807cf29 code=0x0 [ 156.654191][ T29] audit: type=1804 audit(1718920087.135:35): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1556852694/syzkaller.WaEjkO/26/bus" dev="sda1" ino=1969 res=1 errno=0 [ 156.693980][ T29] audit: type=1804 audit(1718920087.155:36): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1556852694/syzkaller.WaEjkO/26/bus" dev="sda1" ino=1969 res=1 errno=0 [ 156.722946][ T5868] loop2: detected capacity change from 0 to 2048 [ 156.796718][ T5868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.831914][ T29] audit: type=1804 audit(1718920087.215:37): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1556852694/syzkaller.WaEjkO/26/bus" dev="sda1" ino=1969 res=1 errno=0 [ 156.993851][ T5868] ext4 filesystem being mounted at /root/syzkaller-testdir752589080/syzkaller.K56Crf/31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.059152][ T29] audit: type=1804 audit(1718920087.605:38): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1556852694/syzkaller.WaEjkO/26/bus" dev="sda1" ino=1969 res=1 errno=0 [ 159.449623][ T5125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.067040][ T5894] loop0: detected capacity change from 0 to 4096 [ 161.671870][ T29] audit: type=1326 audit(1718920093.145:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3f807cf29 code=0x0 [ 162.576504][ T5269] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.190658][ T5924] loop0: detected capacity change from 0 to 4096 [ 163.548655][ T5936] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.081175][ T29] audit: type=1804 audit(1718920095.545:40): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/33/bus" dev="sda1" ino=1973 res=1 errno=0 [ 164.111431][ T29] audit: type=1804 audit(1718920095.555:41): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/33/bus" dev="sda1" ino=1973 res=1 errno=0 [ 164.214898][ T29] audit: type=1804 audit(1718920095.555:42): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/33/bus" dev="sda1" ino=1973 res=1 errno=0 [ 164.265168][ T29] audit: type=1804 audit(1718920095.565:43): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/33/bus" dev="sda1" ino=1973 res=1 errno=0 [ 164.400090][ T29] audit: type=1800 audit(1718920095.885:44): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 164.432961][ T29] audit: type=1804 audit(1718920095.925:45): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1556852694/syzkaller.WaEjkO/28/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 164.765393][ T5949] loop4: detected capacity change from 0 to 32768 [ 165.223748][ T5949] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 165.239288][ T5949] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 165.386071][ T5949] bcachefs (loop4): alloc_read... done [ 165.391628][ T5949] bcachefs (loop4): stripes_read... done [ 165.397345][ T5949] bcachefs (loop4): snapshots_read... done [ 165.405585][ T5949] bcachefs (loop4): journal_replay... done [ 165.411524][ T5949] bcachefs (loop4): resume_logged_ops... done [ 165.418746][ T5949] bcachefs (loop4): going read-write [ 165.445505][ T5949] bcachefs (loop4): done starting filesystem [ 165.759961][ T5966] loop1: detected capacity change from 0 to 512 [ 165.837118][ T5966] EXT4-fs: Ignoring removed i_version option [ 165.859985][ T5966] EXT4-fs: Ignoring removed nobh option [ 165.877383][ T5966] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.979568][ T5966] EXT4-fs (loop1): failed to initialize system zone (-117) [ 165.995980][ T5966] EXT4-fs (loop1): mount failed [ 166.675253][ T5979] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 166.678663][ T5977] loop2: detected capacity change from 0 to 2048 [ 167.175937][ T5977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.224534][ T5984] loop0: detected capacity change from 0 to 2048 [ 167.340792][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.857564][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.310081][ T5966] loop1: detected capacity change from 0 to 32768 [ 168.382073][ T5129] bcachefs (loop4): shutting down [ 168.387160][ T5129] bcachefs (loop4): going read-only [ 168.393047][ T5129] bcachefs (loop4): finished waiting for writes to stop [ 168.412347][ T5129] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 168.461350][ T5129] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 168.561439][ T5129] bcachefs (loop4): shutdown complete, journal seq 12 [ 168.639092][ T5129] bcachefs (loop4): marking filesystem clean [ 168.661788][ T29] audit: type=1326 audit(1718920100.125:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0a667cf29 code=0x0 [ 168.683942][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.725014][ T5966] jfs_mkdir: dtInsert returned -EIO [ 168.735579][ T6001] loop3: detected capacity change from 0 to 2048 [ 168.788073][ T5966] ERROR: (device loop1): jfs_mkdir: [ 168.788073][ T5966] [ 168.878586][ T5966] ERROR: (device loop1): remounting filesystem as read-only [ 168.928941][ T5129] bcachefs (loop4): shutdown complete [ 169.263488][ T6005] jfs_lookup: iget failed on inum 4 [ 171.673532][ T5985] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.833993][ T29] audit: type=1804 audit(1718920102.845:47): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/24/bus" dev="sda1" ino=1952 res=1 errno=0 [ 172.005367][ T29] audit: type=1804 audit(1718920102.945:48): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/24/bus" dev="sda1" ino=1952 res=1 errno=0 [ 172.102366][ T29] audit: type=1804 audit(1718920103.055:49): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/24/bus" dev="sda1" ino=1952 res=1 errno=0 [ 172.178156][ T29] audit: type=1804 audit(1718920103.055:50): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/24/bus" dev="sda1" ino=1952 res=1 errno=0 [ 172.255995][ T5125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.881783][ T29] audit: type=1804 audit(1718920104.225:51): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/32/bus" dev="sda1" ino=1956 res=1 errno=0 [ 172.908705][ T6022] overlay: ./bus is not a directory [ 173.056053][ T29] audit: type=1804 audit(1718920104.225:52): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/32/bus" dev="sda1" ino=1956 res=1 errno=0 [ 173.125840][ T29] audit: type=1804 audit(1718920104.225:53): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/32/bus" dev="sda1" ino=1956 res=1 errno=0 [ 173.211981][ T29] audit: type=1804 audit(1718920104.235:54): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/32/bus" dev="sda1" ino=1956 res=1 errno=0 [ 173.456426][ T6027] loop2: detected capacity change from 0 to 4096 [ 173.768446][ T6037] loop5: detected capacity change from 0 to 2048 [ 173.781141][ T6038] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.852762][ T6037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.737608][ T6043] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.183465][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.414348][ T29] audit: type=1326 audit(1718920109.895:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88fa7cf29 code=0x0 [ 179.336340][ T6062] loop2: detected capacity change from 0 to 256 [ 179.391460][ T6062] FAT-fs (loop2): Unrecognized mount option "codeate=1" or missing value [ 179.409293][ T6065] loop4: detected capacity change from 0 to 512 [ 179.449984][ T6065] EXT4-fs: Ignoring removed i_version option [ 179.482962][ T6067] loop1: detected capacity change from 0 to 2048 [ 179.514228][ T6065] EXT4-fs: Ignoring removed nobh option [ 179.519874][ T6065] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.641175][ T6065] EXT4-fs (loop4): failed to initialize system zone (-117) [ 179.683854][ T6065] EXT4-fs (loop4): mount failed [ 179.738272][ T6059] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.761854][ T6056] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 179.934959][ T6062] loop2: detected capacity change from 0 to 4096 [ 180.013963][ T6062] ======================================================= [ 180.013963][ T6062] WARNING: The mand mount option has been deprecated and [ 180.013963][ T6062] and is ignored by this kernel. Remove the mand [ 180.013963][ T6062] option from the mount to silence this warning. [ 180.013963][ T6062] ======================================================= [ 180.080236][ T6062] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 180.129364][ T6077] loop3: detected capacity change from 0 to 2048 [ 180.333629][ T6062] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 180.379236][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.394089][ T29] audit: type=1804 audit(1718920112.725:56): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/37/bus" dev="sda1" ino=1975 res=1 errno=0 [ 181.503693][ T6095] overlay: ./bus is not a directory [ 181.818193][ T29] audit: type=1804 audit(1718920112.725:57): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/37/bus" dev="sda1" ino=1975 res=1 errno=0 [ 181.861845][ T29] audit: type=1804 audit(1718920112.725:58): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/37/bus" dev="sda1" ino=1975 res=1 errno=0 [ 181.908820][ T29] audit: type=1804 audit(1718920112.725:59): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/37/bus" dev="sda1" ino=1975 res=1 errno=0 [ 183.316166][ T6081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 183.447088][ T6108] loop5: detected capacity change from 0 to 2048 [ 183.607515][ T6108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.670666][ T29] audit: type=1326 audit(1718920115.165:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6109 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88fa7cf29 code=0x0 [ 187.695865][ T6116] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.965149][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.678888][ T6135] loop4: detected capacity change from 0 to 2048 [ 190.462559][ T5131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.103636][ T29] audit: type=1804 audit(1718920122.575:61): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/28/bus" dev="sda1" ino=1972 res=1 errno=0 [ 191.138222][ T6152] overlay: ./bus is not a directory [ 191.153174][ T29] audit: type=1804 audit(1718920122.575:62): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/28/bus" dev="sda1" ino=1972 res=1 errno=0 [ 191.177546][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.295406][ T29] audit: type=1804 audit(1718920122.575:63): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/28/bus" dev="sda1" ino=1972 res=1 errno=0 [ 191.325952][ T29] audit: type=1804 audit(1718920122.585:64): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/28/bus" dev="sda1" ino=1972 res=1 errno=0 [ 192.861111][ T6164] loop4: detected capacity change from 0 to 2048 [ 193.703363][ T6164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.772531][ T6164] ext4 filesystem being mounted at /root/syzkaller-testdir203175817/syzkaller.uFiMnR/34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.867473][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.893516][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.291274][ T6173] loop5: detected capacity change from 0 to 2048 [ 196.712866][ T5117] Bluetooth: hci5: command 0x0406 tx timeout [ 196.719051][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 196.726822][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 196.733388][ T5117] Bluetooth: hci1: command 0x0406 tx timeout [ 196.739420][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 196.751724][ T4487] Bluetooth: hci3: command 0x0406 tx timeout [ 197.085881][ T6173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.727439][ T5129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.774402][ T6169] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 201.008333][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.323898][ T29] audit: type=1804 audit(1718920138.805:65): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/36/bus" dev="sda1" ino=1958 res=1 errno=0 [ 207.471915][ T6211] overlay: ./bus is not a directory [ 207.506212][ T29] audit: type=1804 audit(1718920138.805:66): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/36/bus" dev="sda1" ino=1958 res=1 errno=0 [ 207.530594][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.701868][ T29] audit: type=1804 audit(1718920138.805:67): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/36/bus" dev="sda1" ino=1958 res=1 errno=0 [ 207.726177][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.953806][ T29] audit: type=1804 audit(1718920138.805:68): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/36/bus" dev="sda1" ino=1958 res=1 errno=0 [ 208.978106][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.556768][ T29] audit: type=1326 audit(1718920144.055:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6245 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88fa7cf29 code=0x0 [ 213.869049][ T6244] loop3: detected capacity change from 0 to 4096 [ 213.988087][ T6262] loop4: detected capacity change from 0 to 4096 [ 213.998243][ T6262] ntfs3: Unknown parameter '' [ 214.024072][ T6250] loop2: detected capacity change from 0 to 2048 [ 214.135555][ T6265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.541094][ T29] audit: type=1800 audit(1718920146.035:70): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1953 res=0 errno=0 [ 214.872280][ T29] audit: type=1800 audit(1718920146.375:71): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 215.005163][ T29] audit: type=1804 audit(1718920146.455:72): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/33/file0/bus" dev="loop3" ino=18 res=1 errno=0 [ 215.030525][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.698943][ T6279] loop4: detected capacity change from 0 to 4096 [ 215.835910][ T6287] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.249048][ T29] audit: type=1800 audit(1718920148.725:73): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 217.335696][ T29] audit: type=1804 audit(1718920148.805:74): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir203175817/syzkaller.uFiMnR/38/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 217.360907][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.673436][ T6308] loop0: detected capacity change from 0 to 2048 [ 217.708495][ T6309] loop3: detected capacity change from 0 to 1024 [ 217.973386][ T6308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.081322][ T29] audit: type=1804 audit(1718920149.555:75): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/43/bus" dev="sda1" ino=1973 res=1 errno=0 [ 218.104750][ T6309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.106224][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.139806][ T6318] overlay: ./bus is not a directory [ 218.205740][ T29] audit: type=1804 audit(1718920149.555:76): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/43/bus" dev="sda1" ino=1973 res=1 errno=0 [ 218.337025][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.457153][ T29] audit: type=1804 audit(1718920149.565:77): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/43/bus" dev="sda1" ino=1973 res=1 errno=0 [ 218.517959][ T29] audit: type=1804 audit(1718920149.565:78): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/43/bus" dev="sda1" ino=1973 res=1 errno=0 [ 218.572977][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.589894][ T29] audit: type=1800 audit(1718920149.995:79): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 218.651434][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 218.769869][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 218.891628][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 219.027802][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 219.138919][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 219.655372][ T6329] loop4: detected capacity change from 0 to 16 [ 219.720071][ T6329] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.730869][ T6329] syz-executor.4: attempt to access beyond end of device [ 219.730869][ T6329] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 219.748401][ T6329] syz-executor.4: attempt to access beyond end of device [ 219.748401][ T6329] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 219.774183][ T6329] syz-executor.4: attempt to access beyond end of device [ 219.774183][ T6329] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 220.355307][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 220.495686][ T6325] loop2: detected capacity change from 0 to 4096 [ 220.517761][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 220.573753][ T6325] ntfs3: Unknown parameter '' [ 221.129992][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 221.983541][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 223.519217][ T6347] loop1: detected capacity change from 0 to 16 [ 224.348474][ T6347] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.359079][ T6346] syz-executor.1: attempt to access beyond end of device [ 224.359079][ T6346] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 224.361823][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 224.492112][ T6347] syz-executor.1: attempt to access beyond end of device [ 224.492112][ T6347] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 224.507633][ T6348] syz-executor.1: attempt to access beyond end of device [ 224.507633][ T6348] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 224.561989][ T6346] syz-executor.1: attempt to access beyond end of device [ 224.561989][ T6346] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 224.634362][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 224.691414][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 224.808727][ T6350] loop0: detected capacity change from 0 to 4096 [ 224.884328][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 225.135630][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 225.231723][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 226.126586][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 227.161622][ T6368] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.182118][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 228.367456][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 228.427243][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 228.549455][ T29] audit: type=1804 audit(1718920160.015:80): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/51/bus" dev="sda1" ino=1961 res=1 errno=0 [ 228.587307][ T6380] loop4: detected capacity change from 0 to 1024 [ 228.609714][ T6383] overlay: ./bus is not a directory [ 228.660364][ T29] audit: type=1804 audit(1718920160.025:81): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/51/bus" dev="sda1" ino=1961 res=1 errno=0 [ 228.985304][ T29] audit: type=1804 audit(1718920160.025:82): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/51/bus" dev="sda1" ino=1961 res=1 errno=0 [ 228.997510][ T6389] loop1: detected capacity change from 0 to 2048 [ 229.010012][ T29] audit: type=1804 audit(1718920160.025:83): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir3565880605/syzkaller.19SliC/51/bus" dev="sda1" ino=1961 res=1 errno=0 [ 230.160391][ T5131] EXT4-fs error: 54 callbacks suppressed [ 230.160415][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 230.228665][ T6384] loop2: detected capacity change from 0 to 4096 [ 230.254712][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.272216][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 230.311036][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.533080][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 230.568678][ T6408] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 230.580456][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 230.638912][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.652408][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 230.720640][ T6407] loop0: detected capacity change from 0 to 4096 [ 230.728624][ T6407] ntfs3: Unknown parameter '' [ 230.756420][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 230.800830][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 230.864094][ T29] audit: type=1800 audit(1718920162.365:84): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 230.864220][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 230.951893][ T29] audit: type=1800 audit(1718920162.445:85): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 231.009635][ T29] audit: type=1804 audit(1718920162.475:86): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/48/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 231.136710][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 234.824546][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 234.914403][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 234.935673][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 234.958830][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 235.008043][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 235.261601][ T5131] EXT4-fs error: 4 callbacks suppressed [ 235.261628][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 235.389943][ T6417] loop0: detected capacity change from 0 to 16 [ 236.151315][ T6417] erofs: (device loop0): mounted with root inode @ nid 36. [ 236.170209][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.197537][ T6416] syz-executor.0: attempt to access beyond end of device [ 236.197537][ T6416] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 236.212853][ T6416] syz-executor.0: attempt to access beyond end of device [ 236.212853][ T6416] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 236.231992][ T6416] syz-executor.0: attempt to access beyond end of device [ 236.231992][ T6416] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 236.263306][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.290550][ T6419] loop1: detected capacity change from 0 to 512 [ 236.300618][ T6419] EXT4-fs: Ignoring removed nobh option [ 236.312371][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.337560][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.385478][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.459785][ T6419] fscrypt_msg: 11 callbacks suppressed [ 236.459806][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.512410][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.540636][ T6419] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 236.555578][ T6419] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz-executor.1: casefold flag without casefold feature [ 236.569854][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.571134][ T6419] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 236.609665][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.625979][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.663478][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.698523][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.735685][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.736695][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.796461][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.805026][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.815854][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 236.865868][ T5131] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 38: comm syz-executor.3: path /root/syzkaller-testdir1094231390/syzkaller.PJFjJ4/34/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 236.893082][ T6428] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.925035][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.962743][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 236.990159][ T5131] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 237.016127][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 237.242202][ T6428] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 237.286528][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 237.334349][ T6419] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 238.482764][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.407901][ T6447] loop2: detected capacity change from 0 to 128 [ 240.607707][ T5129] EXT4-fs error: 138 callbacks suppressed [ 240.607739][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 240.917815][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 242.067244][ T6466] loop1: detected capacity change from 0 to 2048 [ 242.160785][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 242.633380][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.720431][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 242.772397][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 242.914110][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 242.940546][ T6477] loop5: detected capacity change from 0 to 1024 [ 242.945842][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.974919][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 243.163905][ T6477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.283136][ T5131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.163025][ T29] audit: type=1800 audit(1718920175.665:87): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=19 res=0 errno=0 [ 244.187132][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 244.292033][ T6477] loop5: detected capacity change from 1024 to 11 [ 244.659606][ T5113] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5731: Out of memory [ 244.696990][ T29] audit: type=1326 audit(1718920175.845:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531247cf29 code=0x0 [ 245.313226][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 245.371909][ T5113] EXT4-fs error (device loop5): ext4_dirty_inode:5935: inode #2: comm syz-executor.5: mark_inode_dirty error [ 245.480852][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 245.487371][ T2831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.901569][ T6483] loop1: detected capacity change from 0 to 4096 [ 246.556744][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 246.566302][ T5113] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.238386][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 247.601175][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 248.205174][ T6480] kmmpd-loop5: attempt to access beyond end of device [ 248.205174][ T6480] loop5: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 248.834340][ T6499] sched: RT throttling activated [ 249.172154][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 249.207623][ T6480] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 249.269801][ T6480] EXT4-fs error (device loop5): kmmpd:186: comm kmmpd-loop5: Error writing to MMP block [ 249.308825][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 249.335749][ T2831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.358398][ T6480] kmmpd-loop5: attempt to access beyond end of device [ 249.358398][ T6480] loop5: rw=14337, sector=128, nr_sectors = 2 limit=11 [ 249.417579][ T6480] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 250.676576][ T2831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.936262][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 251.015593][ T6521] loop1: detected capacity change from 0 to 16 [ 251.125382][ T6521] erofs: (device loop1): mounted with root inode @ nid 36. [ 251.166118][ T6521] syz-executor.1: attempt to access beyond end of device [ 251.166118][ T6521] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 251.196226][ T6521] syz-executor.1: attempt to access beyond end of device [ 251.196226][ T6521] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 251.229435][ T6521] syz-executor.1: attempt to access beyond end of device [ 251.229435][ T6521] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 251.251554][ T6521] syz-executor.1: attempt to access beyond end of device [ 251.251554][ T6521] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 251.348459][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 251.879822][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 251.915834][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 251.983190][ T5113] syz-executor.5 (5113) used greatest stack depth: 18576 bytes left [ 252.073374][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 252.169779][ T6506] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 252.177726][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 252.852193][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 252.924205][ T2831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.063335][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 253.197154][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 253.263600][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 253.522124][ T5129] EXT4-fs error (device loop4): ext4_empty_dir:3127: inode #11: block 38: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 253.637287][ T6537] loop2: detected capacity change from 0 to 2048 [ 253.910266][ T6537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.252498][ T5129] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 38: comm syz-executor.4: path /root/syzkaller-testdir203175817/syzkaller.uFiMnR/41/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 254.767616][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 254.777772][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 254.790823][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 254.801373][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 254.822410][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 254.831465][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.875721][ T5125] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.903587][ T2831] bridge_slave_1: left allmulticast mode [ 254.937584][ T5129] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.937746][ T2831] bridge_slave_1: left promiscuous mode [ 254.998760][ T2831] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.103171][ T2831] bridge_slave_0: left allmulticast mode [ 255.131173][ T2831] bridge_slave_0: left promiscuous mode [ 255.161246][ T2831] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.306945][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.318203][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.328869][ T6560] loop2: detected capacity change from 0 to 4096 [ 255.524350][ T6565] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.636528][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.678343][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.694985][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.713092][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.720958][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 255.729096][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.168401][ T6571] loop1: detected capacity change from 0 to 4096 [ 256.181218][ T6571] ntfs3: Unknown parameter '' [ 256.304992][ T6548] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 256.635946][ T29] audit: type=1800 audit(1718920188.125:89): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1955 res=0 errno=0 [ 256.906192][ T5127] Bluetooth: hci0: command tx timeout [ 257.024760][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.033915][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.044172][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.067932][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.085542][ T5119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 257.093269][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 259.204723][ T5119] Bluetooth: hci0: command tx timeout [ 259.204804][ T5127] Bluetooth: hci4: command tx timeout [ 259.210203][ T5119] Bluetooth: hci5: command tx timeout [ 259.544552][ T2831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.742426][ T2831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.777801][ T6605] loop0: detected capacity change from 0 to 4096 [ 260.814636][ T2831] bond0 (unregistering): Released all slaves [ 260.826068][ T6605] ntfs3: Unknown parameter '' [ 261.183883][ T29] audit: type=1804 audit(1718920192.655:90): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/64/bus" dev="sda1" ino=1955 res=1 errno=0 [ 261.208747][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.221855][ T29] audit: type=1804 audit(1718920192.665:91): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/64/bus" dev="sda1" ino=1955 res=1 errno=0 [ 261.222864][ T5119] Bluetooth: hci4: command tx timeout [ 261.254943][ T5119] Bluetooth: hci0: command tx timeout [ 261.264461][ T29] audit: type=1804 audit(1718920192.665:92): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/64/bus" dev="sda1" ino=1955 res=1 errno=0 [ 261.289298][ T29] audit: type=1804 audit(1718920192.665:93): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/64/bus" dev="sda1" ino=1955 res=1 errno=0 [ 261.301801][ T5123] Bluetooth: hci5: command tx timeout [ 261.321479][ T6617] overlay: ./bus is not a directory [ 261.539025][ T29] audit: type=1800 audit(1718920193.035:94): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1954 res=0 errno=0 [ 262.511160][ T6623] loop0: detected capacity change from 0 to 2048 [ 262.723718][ T6623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.341918][ T5123] Bluetooth: hci0: command tx timeout [ 263.347678][ T5123] Bluetooth: hci4: command tx timeout [ 263.381828][ T5119] Bluetooth: hci5: command tx timeout [ 263.713251][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.861908][ T2831] hsr_slave_0: left promiscuous mode [ 263.921945][ T2831] hsr_slave_1: left promiscuous mode [ 263.940708][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.951785][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.960860][ T2831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.977340][ T2831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.031797][ T2831] veth1_macvtap: left promiscuous mode [ 264.042301][ T2831] veth0_macvtap: left promiscuous mode [ 264.058327][ T2831] veth1_vlan: left promiscuous mode [ 264.069306][ T2831] veth0_vlan: left promiscuous mode [ 266.214520][ T5119] Bluetooth: hci4: command tx timeout [ 266.220752][ T5119] Bluetooth: hci5: command tx timeout [ 267.106178][ T2831] team0 (unregistering): Port device team_slave_1 removed [ 268.469616][ T6674] loop1: detected capacity change from 0 to 4096 [ 268.496985][ T6681] loop2: detected capacity change from 0 to 4096 [ 268.523569][ T6674] ntfs3: Unknown parameter '' [ 268.583359][ T2831] team0 (unregistering): Port device team_slave_0 removed [ 268.631566][ T6685] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 268.732111][ T29] audit: type=1800 audit(1718920200.205:95): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 269.049786][ T6692] loop1: detected capacity change from 0 to 256 [ 269.126730][ T6692] FAT-fs (loop1): Unrecognized mount option "codeate=1" or missing value [ 269.347269][ T6692] loop1: detected capacity change from 0 to 4096 [ 269.358819][ T6692] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 269.495327][ T6692] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 269.614759][ T6694] loop2: detected capacity change from 0 to 4096 [ 269.700864][ T6695] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 270.878842][ T6703] loop1: detected capacity change from 0 to 2048 [ 271.071145][ T6703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.181444][ T29] audit: type=1804 audit(1718920202.665:96): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/64/bus" dev="sda1" ino=1958 res=1 errno=0 [ 271.206400][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.322518][ T6710] overlay: ./bus is not a directory [ 271.397177][ T29] audit: type=1804 audit(1718920202.665:97): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/64/bus" dev="sda1" ino=1958 res=1 errno=0 [ 271.479998][ T29] audit: type=1804 audit(1718920202.675:98): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/64/bus" dev="sda1" ino=1958 res=1 errno=0 [ 271.505366][ T29] audit: type=1804 audit(1718920202.675:99): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/64/bus" dev="sda1" ino=1958 res=1 errno=0 [ 271.570055][ T5121] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.949471][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 272.297441][ T2831] IPVS: stop unused estimator thread 0... [ 273.335191][ T6566] chnl_net:caif_netlink_parms(): no params data found [ 275.040060][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 276.046309][ T2831] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.158792][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.185297][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.207112][ T6554] bridge_slave_0: entered allmulticast mode [ 276.223635][ T6554] bridge_slave_0: entered promiscuous mode [ 276.233471][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.240656][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.283754][ T6554] bridge_slave_1: entered allmulticast mode [ 276.294939][ T6554] bridge_slave_1: entered promiscuous mode [ 276.389437][ T2831] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.512019][ T5118] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 276.553611][ T6768] loop0: detected capacity change from 0 to 2048 [ 276.701960][ T5118] usb 3-1: Using ep0 maxpacket: 8 [ 276.710263][ T5118] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 276.725236][ T5118] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 276.738573][ T5118] usb 3-1: config 0 has no interface number 0 [ 276.746704][ T5118] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.756935][ T5118] usb 3-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 276.767795][ T5118] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 276.778884][ T5118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.800222][ T5118] usb 3-1: config 0 descriptor?? [ 276.855198][ T2831] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.860753][ T6772] loop1: detected capacity change from 0 to 4096 [ 276.875706][ T6772] ntfs3: Unknown parameter '' [ 276.920702][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.938723][ T6552] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 276.993543][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.034105][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.049378][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.062939][ T5118] usb 3-1: USB disconnect, device number 2 [ 277.146638][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.178462][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.194999][ T6566] bridge_slave_0: entered allmulticast mode [ 277.214705][ T6566] bridge_slave_0: entered promiscuous mode [ 277.456285][ T2831] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.623063][ T29] audit: type=1326 audit(1718920209.035:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6783 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0a667cf29 code=0x0 [ 278.927006][ T6801] loop0: detected capacity change from 0 to 2048 [ 279.068188][ T6801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.091317][ T29] audit: type=1804 audit(1718920210.545:101): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/72/bus" dev="sda1" ino=1957 res=1 errno=0 [ 279.228912][ T6806] overlay: ./bus is not a directory [ 279.302708][ T29] audit: type=1804 audit(1718920210.555:102): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/72/bus" dev="sda1" ino=1957 res=1 errno=0 [ 279.327590][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.353383][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.366777][ T29] audit: type=1804 audit(1718920210.555:103): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/72/bus" dev="sda1" ino=1957 res=1 errno=0 [ 279.367093][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.391278][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.410656][ T6566] bridge_slave_1: entered allmulticast mode [ 279.419283][ T6566] bridge_slave_1: entered promiscuous mode [ 279.431034][ T6792] loop2: detected capacity change from 0 to 4096 [ 279.567347][ T29] audit: type=1804 audit(1718920210.555:104): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4004305233/syzkaller.QsbYhF/72/bus" dev="sda1" ino=1957 res=1 errno=0 [ 279.599177][ T5115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.631887][ T6809] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.823691][ T6554] team0: Port device team_slave_0 added [ 279.845652][ T6554] team0: Port device team_slave_1 added [ 280.189704][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.198448][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.206488][ T6583] bridge_slave_0: entered allmulticast mode [ 280.220468][ T6583] bridge_slave_0: entered promiscuous mode [ 280.295727][ T6817] loop1: detected capacity change from 0 to 16 [ 280.345017][ T6817] erofs: (device loop1): mounted with root inode @ nid 36. [ 280.376764][ T6817] syz-executor.1: attempt to access beyond end of device [ 280.376764][ T6817] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 280.404017][ T6817] syz-executor.1: attempt to access beyond end of device [ 280.404017][ T6817] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 280.440523][ T6817] syz-executor.1: attempt to access beyond end of device [ 280.440523][ T6817] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 280.461755][ T6817] syz-executor.1: attempt to access beyond end of device [ 280.461755][ T6817] loop1: rw=0, sector=8, nr_sectors = 32 limit=16 [ 281.103479][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.196442][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.225411][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.240196][ T6583] bridge_slave_1: entered allmulticast mode [ 281.260659][ T6583] bridge_slave_1: entered promiscuous mode [ 281.458110][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.536915][ T5179] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 281.861926][ T5179] usb 1-1: Using ep0 maxpacket: 8 [ 281.942516][ T5179] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 282.209888][ T5179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.372619][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.379638][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.382216][ T5179] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.426985][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.448294][ T5179] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.463050][ T5179] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.472349][ T5179] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.523921][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.530898][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.559940][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.588147][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.644681][ T6566] team0: Port device team_slave_0 added [ 282.677338][ T6566] team0: Port device team_slave_1 added [ 282.729059][ T5179] usb 1-1: usb_control_msg returned -32 [ 282.741376][ T5179] usbtmc 1-1:16.0: can't read capabilities [ 282.766014][ T5179] usb 1-1: USB disconnect, device number 4 [ 282.805029][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.010389][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.034145][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.066905][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.093637][ T6554] hsr_slave_0: entered promiscuous mode [ 283.108655][ T6554] hsr_slave_1: entered promiscuous mode [ 283.121928][ T6554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.131173][ T6554] Cannot create hsr debugfs directory [ 283.176812][ T6583] team0: Port device team_slave_0 added [ 283.232207][ T2831] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.260243][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.277460][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.339140][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.463525][ T6583] team0: Port device team_slave_1 added [ 283.626735][ T6849] loop2: detected capacity change from 0 to 2048 [ 283.641219][ T2831] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.809897][ T2831] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.873742][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.884987][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.915825][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.059760][ T2831] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.077089][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.085406][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.123829][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.174052][ T6566] hsr_slave_0: entered promiscuous mode [ 284.189222][ T6566] hsr_slave_1: entered promiscuous mode [ 284.200726][ T6566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.221318][ T6566] Cannot create hsr debugfs directory [ 284.840396][ T6583] hsr_slave_0: entered promiscuous mode [ 284.948144][ T6583] hsr_slave_1: entered promiscuous mode [ 285.054669][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.192416][ T6583] Cannot create hsr debugfs directory [ 285.279490][ T29] audit: type=1800 audit(1718920216.755:105): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=8520 dev="sda1" ino=1956 res=0 errno=0 [ 287.361868][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 287.625764][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 287.641473][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.682957][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 287.702271][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 287.717942][ T9] usb 1-1: Manufacturer: syz [ 287.734619][ T9] usb 1-1: config 0 descriptor?? [ 287.954523][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.963205][ T9] rc_core: IR keymap rc-hauppauge not found [ 287.982059][ T9] Registered IR keymap rc-empty [ 287.989506][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 288.001543][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.114025][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 288.129484][ T29] audit: type=1804 audit(1718920219.595:106): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/76/bus" dev="sda1" ino=1957 res=1 errno=0 [ 288.160292][ T29] audit: type=1804 audit(1718920219.595:107): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/76/bus" dev="sda1" ino=1957 res=1 errno=0 [ 288.196406][ T6881] overlay: ./bus is not a directory [ 288.215597][ T29] audit: type=1804 audit(1718920219.605:108): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/76/bus" dev="sda1" ino=1957 res=1 errno=0 [ 288.244432][ T29] audit: type=1804 audit(1718920219.605:109): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/76/bus" dev="sda1" ino=1957 res=1 errno=0 [ 288.960604][ T6885] loop2: detected capacity change from 0 to 4096 [ 288.994930][ T6886] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.489429][ T29] audit: type=1804 audit(1718920221.905:110): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/78/bus" dev="sda1" ino=1957 res=1 errno=0 [ 290.521043][ T29] audit: type=1804 audit(1718920221.925:111): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/78/bus" dev="sda1" ino=1957 res=1 errno=0 [ 290.547241][ T29] audit: type=1804 audit(1718920221.935:112): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/78/bus" dev="sda1" ino=1957 res=1 errno=0 [ 290.583517][ T6890] overlay: ./bus is not a directory [ 290.588027][ T29] audit: type=1804 audit(1718920221.945:113): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir752589080/syzkaller.K56Crf/78/bus" dev="sda1" ino=1957 res=1 errno=0 [ 291.411792][ T5183] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 291.622062][ T5183] usb 3-1: Using ep0 maxpacket: 8 [ 291.632540][ T5183] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 291.641106][ T5183] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 291.649514][ T5183] usb 3-1: config 0 has no interface number 0 [ 291.656037][ T5183] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.666190][ T5183] usb 3-1: config 0 interface 21 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.676463][ T5183] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 291.685813][ T5183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.703003][ T5183] usb 3-1: config 0 descriptor?? [ 291.952961][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.973768][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.984860][ T25] usb 3-1: USB disconnect, device number 3 [ 292.787168][ T29] audit: type=1326 audit(1718920224.215:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531247cf29 code=0x0 [ 293.844603][ T29] audit: type=1326 audit(1718920225.345:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6901 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531247cf29 code=0x0 [ 297.902003][ T29] audit: type=1326 audit(1718920229.395:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f531247cf29 code=0x0 [ 314.898541][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.920898][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.941959][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.951475][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.959962][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 314.970299][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 316.299614][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.308775][ T5123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.317024][ T5123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.325768][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.334616][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 316.342268][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.763442][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.769836][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.062081][ T5119] Bluetooth: hci6: command tx timeout [ 317.421573][ T5123] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 317.432648][ T5123] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 317.440984][ T5123] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 317.449897][ T5123] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 317.458875][ T5123] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 317.466868][ T5123] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.422116][ T5123] Bluetooth: hci7: command tx timeout [ 319.151991][ T5123] Bluetooth: hci6: command tx timeout [ 319.542160][ T5123] Bluetooth: hci8: command tx timeout [ 320.038489][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 320.053756][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 320.061482][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 320.070263][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 320.080056][ T5119] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 320.092556][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 320.502113][ T5123] Bluetooth: hci7: command tx timeout [ 321.223305][ T5123] Bluetooth: hci6: command tx timeout [ 321.369393][ T5119] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 321.382644][ T5119] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 321.391224][ T5119] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 321.400982][ T5119] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 321.410003][ T5119] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 321.420910][ T5119] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 321.623093][ T5123] Bluetooth: hci8: command tx timeout [ 322.187571][ T5123] Bluetooth: hci9: command tx timeout [ 322.581959][ T5123] Bluetooth: hci7: command tx timeout [ 323.307837][ T5123] Bluetooth: hci6: command tx timeout [ 323.462440][ T5123] Bluetooth: hci10: command tx timeout [ 323.701965][ T5123] Bluetooth: hci8: command tx timeout [ 324.262004][ T5123] Bluetooth: hci9: command tx timeout [ 324.661995][ T5123] Bluetooth: hci7: command tx timeout [ 325.542022][ T5123] Bluetooth: hci10: command tx timeout [ 325.781979][ T5123] Bluetooth: hci8: command tx timeout [ 326.342209][ T5123] Bluetooth: hci9: command tx timeout [ 327.621782][ T5123] Bluetooth: hci10: command tx timeout [ 328.422324][ T5123] Bluetooth: hci9: command tx timeout [ 329.701921][ T5123] Bluetooth: hci10: command tx timeout [ 333.243724][ T5119] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 333.253959][ T5119] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 333.261951][ T5119] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 333.270394][ T5119] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 333.284901][ T5119] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 333.300827][ T5119] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 335.382686][ T5123] Bluetooth: hci11: command tx timeout [ 337.462986][ T5123] Bluetooth: hci11: command tx timeout [ 339.544346][ T5123] Bluetooth: hci11: command tx timeout [ 341.622420][ T5123] Bluetooth: hci11: command tx timeout [ 378.206603][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.219364][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.265410][ T5124] Bluetooth: hci0: command 0x0406 tx timeout [ 380.265435][ T5133] Bluetooth: hci5: command 0x0406 tx timeout [ 380.265452][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 380.398482][ T5123] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 380.410492][ T5123] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 380.421244][ T5123] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 380.443683][ T5123] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 380.451908][ T5123] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 380.459503][ T5123] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 381.573003][ T5119] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 381.582693][ T5119] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 381.590632][ T5119] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 381.599760][ T5119] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 381.608096][ T5119] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 381.622299][ T5119] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 382.418126][ T5123] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 382.427496][ T5123] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 382.435434][ T5123] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 382.444861][ T5123] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 382.464743][ T5123] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 382.472738][ T5123] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 382.501909][ T5119] Bluetooth: hci12: command tx timeout [ 383.712572][ T5119] Bluetooth: hci13: command tx timeout [ 384.502092][ T5119] Bluetooth: hci14: command tx timeout [ 384.582042][ T5119] Bluetooth: hci12: command tx timeout [ 385.033269][ T5123] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 385.043370][ T5123] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 385.051558][ T5123] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 385.061110][ T5123] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 385.069924][ T5123] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 385.077899][ T5123] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 385.781903][ T5119] Bluetooth: hci13: command tx timeout [ 386.393463][ T5123] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 386.406489][ T5123] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 386.414942][ T5123] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 386.433260][ T5123] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 386.443263][ T5123] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 386.450741][ T5123] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 386.582074][ T5119] Bluetooth: hci14: command tx timeout [ 386.661949][ T5119] Bluetooth: hci12: command tx timeout [ 387.147505][ T5119] Bluetooth: hci15: command tx timeout [ 387.861918][ T5119] Bluetooth: hci13: command tx timeout [ 388.511867][ T5119] Bluetooth: hci16: command tx timeout [ 388.661831][ T5119] Bluetooth: hci14: command tx timeout [ 388.741874][ T5119] Bluetooth: hci12: command tx timeout [ 389.221995][ T5119] Bluetooth: hci15: command tx timeout [ 389.941967][ T5119] Bluetooth: hci13: command tx timeout [ 390.582244][ T5119] Bluetooth: hci16: command tx timeout [ 390.742988][ T5119] Bluetooth: hci14: command tx timeout [ 391.310823][ T5119] Bluetooth: hci15: command tx timeout [ 392.662375][ T5119] Bluetooth: hci16: command tx timeout [ 393.387625][ T5119] Bluetooth: hci15: command tx timeout [ 394.742079][ T5119] Bluetooth: hci16: command tx timeout [ 398.256953][ T5123] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 398.270817][ T5123] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 398.282234][ T5123] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 398.301510][ T5123] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 398.311866][ T5123] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 398.325695][ T5123] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 400.431994][ T5119] Bluetooth: hci17: command tx timeout [ 402.502128][ T5119] Bluetooth: hci17: command tx timeout [ 404.581977][ T5119] Bluetooth: hci17: command tx timeout [ 406.662016][ T5119] Bluetooth: hci17: command tx timeout [ 439.651865][ T30] INFO: task kworker/u8:10:2831 blocked for more than 143 seconds. [ 439.659989][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 439.668612][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.675015][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.721710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/20 21:52:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 439.772031][ T30] task:kworker/u8:10 state:D stack:22128 pid:2831 tgid:2831 ppid:2 flags:0x00004000 [ 439.828789][ T30] Workqueue: netns cleanup_net [ 439.834112][ T30] Call Trace: [ 439.837442][ T30] [ 439.840498][ T30] __schedule+0x17e8/0x4a20 [ 439.845157][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.850829][ T30] ? __pfx___schedule+0x10/0x10 [ 439.855806][ T30] ? __pfx_lock_release+0x10/0x10 [ 439.860860][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 439.880973][ T30] ? kthread_data+0x52/0xd0 [ 439.889214][ T30] ? schedule+0x90/0x320 [ 439.901735][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.907414][ T30] ? wq_worker_sleeping+0x66/0x240 [ 439.933764][ T30] ? schedule+0x90/0x320 [ 439.938085][ T30] schedule+0x14b/0x320 [ 439.961718][ T30] schedule_preempt_disabled+0x13/0x30 [ 439.967236][ T30] __mutex_lock+0x6a4/0xd70 [ 439.997676][ T30] ? __mutex_lock+0x527/0xd70 [ 440.011059][ T30] ? fib_seq_sum+0x31/0x290 [ 440.022025][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 440.027145][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.061786][ T30] ? net_generic+0x1f/0x240 [ 440.066353][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.091601][ T30] fib_seq_sum+0x31/0x290 [ 440.096119][ T30] register_fib_notifier+0x2db/0x370 [ 440.129141][ T30] ? register_fib_notifier+0x63/0x370 [ 440.145917][ T30] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 440.171786][ T30] nsim_fib_create+0x902/0xa70 [ 440.176619][ T30] ? __pfx_nsim_fib_create+0x10/0x10 [ 440.191741][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.197521][ T30] nsim_dev_reload_up+0x3d1/0x8e0 [ 440.225816][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.231571][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 440.256017][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.270826][ T30] devlink_reload+0x47a/0x870 [ 440.281699][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 440.286942][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.299810][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 440.315361][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 440.321396][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.327819][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.338159][ T30] ? class_remove_file_ns+0x121/0x160 [ 440.345188][ T30] cleanup_net+0x617/0xcc0 [ 440.349651][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 440.362066][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 440.367479][ T30] ? process_scheduled_works+0x945/0x1830 [ 440.382338][ T30] process_scheduled_works+0xa2e/0x1830 [ 440.387947][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.411754][ T30] ? assign_work+0x364/0x3d0 [ 440.416385][ T30] worker_thread+0x86d/0xd70 [ 440.421012][ T30] ? __kthread_parkme+0x169/0x1d0 [ 440.446133][ T30] ? __pfx_worker_thread+0x10/0x10 [ 440.451290][ T30] kthread+0x2f2/0x390 [ 440.465199][ T30] ? __pfx_worker_thread+0x10/0x10 [ 440.470338][ T30] ? __pfx_kthread+0x10/0x10 [ 440.491766][ T30] ret_from_fork+0x4d/0x80 [ 440.496231][ T30] ? __pfx_kthread+0x10/0x10 [ 440.500858][ T30] ret_from_fork_asm+0x1a/0x30 [ 440.521718][ T30] [ 440.524850][ T30] INFO: task dhcpcd:4756 blocked for more than 144 seconds. [ 440.542220][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 440.549868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.591755][ T30] task:dhcpcd state:D stack:23184 pid:4756 tgid:4756 ppid:1 flags:0x00000002 [ 440.612350][ T30] Call Trace: [ 440.615650][ T30] [ 440.618655][ T30] __schedule+0x17e8/0x4a20 [ 440.632274][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.637986][ T30] ? __pfx___schedule+0x10/0x10 [ 440.652090][ T30] ? __pfx_lock_release+0x10/0x10 [ 440.657148][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 440.672054][ T30] ? schedule+0x90/0x320 [ 440.676337][ T30] schedule+0x14b/0x320 [ 440.680560][ T30] schedule_preempt_disabled+0x13/0x30 [ 440.711728][ T30] __mutex_lock+0x6a4/0xd70 [ 440.718163][ T30] ? __mutex_lock+0x527/0xd70 [ 440.731743][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 440.736994][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 440.751700][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 440.757378][ T30] ? __might_fault+0xc6/0x120