last executing test programs: 15m14.882890963s ago: executing program 0 (id=52): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x1}}, 0x10, 0x0}, 0x0) 15m13.892577605s ago: executing program 0 (id=54): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 15m12.910283552s ago: executing program 0 (id=57): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2202, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0xfffffffa) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000140)=0x9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000300)=0x3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x70, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x1d, 0x1, @b_g}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)=0x2000) 15m12.655768265s ago: executing program 0 (id=60): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/282], 0x1, 0x27c, &(0x7f0000000c80)="$eJzs3E+LG2UYAPDHhHa3W9rsQQQP4ote9BLa9RMEaUFcULaNqAdh6mY17JgsmbgSEdubVz9H8ehNUL/AXrx5Fy+LIHipIEY2ybTZGmgrG2d1fz/YnSfzvk/mzfwJzwzkPXz7y492d4rmTjaM2mqKWsSduBexfhTNPDVb1ibx+Zh3J16++NuPz914593XW5ub17ZSut66+cpGSuny899+8tlXL3w/vPjW15e/WYmD9fcOf9346eCZg2cP/7xZvnt/mLJ0q98fZrfyTtruFrvNlN7MO1nRSd1e0Rkca9/J+3t7o5T1ti+t7Q06RZGy3ijtdkZp2E/DwShlH2TdXmo2m+nSWpwd4/rR//oT57WXMRiqc2HRysGgldUXNrbv/huDAgBOl6rq/w+7ReoWqfeo+r8W6v/lad/d2spaVY+C5Tqq/9dm1+9x6n8AAAAAAAAAAAAAAPgvuDceN8bjcaNcln8rEbEaEeXrqsfJcpTH/YbjfybN/XBvNSL/Yr+9354up+2tnehGHp24ci7ij8n5MDONr7+2ee1KmliP7/Lbs/zb++16rJT5pfXF+Ven+el4/rlYm9/+RjTi6cX5Gwvzz8dLL87lN6MRP7wf/chje3JeP8j//GpKr76x+VD+hUk/AAAA+D9opvv+dv8+aW+mctqQh9qnKx88H4jGI54PzN1f/36/DwAAALB8xejT3SzPOwPBkwV23dKDWkRUtPVfIuJ07IQTDX7+eHrVP07nqr+ZAACAkzYr+muDouqRAAAAAAAAAAAAAAAAAAAAwNn1uJOHlf3/ydxjc5urV/MpAQAAAAAAAAAAAAAAAAAAAAAA4HT4KwAA//8AxSVv") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 15m12.280567904s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0xffffff01, @mcast2}, 0x1c, 0x0}}], 0x1, 0x804) 15m11.671164563s ago: executing program 0 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) close(0xffffffffffffffff) 15m10.616683231s ago: executing program 32 (id=67): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) close(0xffffffffffffffff) 13m56.255022496s ago: executing program 1 (id=213): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x0, 0x5e7, &(0x7f0000001a00)="$eJzs3U9rHOcdB/DvrGTZcsFREjtJS0uFfWiJqa3VJo4OBbulFB1CCfSSSw7CXsfCayVIm6KEUuT+vfYdJD3I5556KD0Y0nPfgqCHHAq96+Yys7OrjSXLK8fRrprPB559ntln5vnz88yjnVnMBvjGWn43px6myPLltzfL7Z3tVmdnu3WvX05yOkkjme5lKdaS4vPkRnop3y7frJsrntTPe5++tfRF88H93tZ0nar9G4cdN5qtOmU+yVSdH9H0k9q7+WztDSkGMywDdqkfOBi3R/tsHeXwr3jdApOg6P3d3GcuOZvkTP05IPXq0Dje0T1/R1rlAAAA4IR6YTe72cy5cY8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpL69/+LOjX65fkU/d//n6nfS10+0R6OewAAAAAAAAAA8Bx8v9jazWbO9bcfFdV3/herjfPV67fyUTbSznquZDMr6aab9TSTzA01NLO50u2uN0c4cvHAIxePZ74AAAAAAAAA8H/qt1ne+/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmQZFM9bIqne+X59KYTnImyUy531byj375JHs47gEAAADAMXhhN7vZzLn+9qOiuud/pbrvP5OPspZuVtNNJ+3cqp4F9O76Gzvbrc7Odutemfa3+5P/HmkYVYvpPXs4uOeFao9icMRyfp5f5nLm807Ws5pfZSXdtDOfn1WllRSZq59ezPXHefB4b3xp652njfW1aiSzuZ3VamxXcjMfpJNbaVRzqPY5vMf7ZXSKqVyvjBijW3VezujPdT4Z5qqInBpEZKGOfRmNFw+PxBHPk8d7aqYxeAZ1fpSYX79+pJifrfMy1n+c6JgvDp19rxweieTiv7/3tzudtbt3bm9cnpwpPaPHI9EaisSr36hIzNTR6K2ijVwY1Dx9tbxYHXsuq/lFPsittPNmlvJmFvNG3shClnJtKK4XRrjWGke71i79sC7MJvlTnU+GMq4vDsV1eKWbq+qG39mL0kvPf0Wa/k5dKPv4XZ1Phscj0RyKxMuHR+Ivj8rXjc7a3fU7Kx+O2N8P6ry8bP8wUWtzeb68VP5jVVtfPjvKupcPrGtWdecHdY19dRcGdU+7Umfqz3D7W1qs6l49sK5V1b02VHfQpxwAJt7Z18/OzP5n9l+zn83+fvbO7Ntnfnp66fR3Z3Lqn9N/n/pr40Hjx8Xr+Sy/2bv/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt3Gx5/cXel02usKCgoKg8K4Vybg63a1e+/Dqxsff/Kj1Xsr77ffb6+1Ws1ri0vXlhavXb292mkv9F7HPUzga7D3R3/cIwEAAAAAAAAAAABGdRz/nWDccwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtuV3c+phijQXriykSLLd6uxstzplXT/vmU7SSFL8Oik+T26klzI31FzxpH7e+/StpS+aD+7vtTXd379x2HGj2apT5pNM1fnzau/mV26vGMywDNilfuBg3P4XAAD//9JPDIE=") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socket(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = gettid() rt_tgsigqueueinfo(r3, r4, 0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x4}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/217, 0xd9}], 0x1) signalfd4(r5, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x180000000004) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 13m53.179205059s ago: executing program 1 (id=219): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 'veth0_to_bridge\x00'}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0xb) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r3, &(0x7f0000000080), 0x3a7) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x1d4c, 0x0, 0x0) 13m51.896231812s ago: executing program 1 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x86, 0x8a7, &(0x7f0000000480)="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", 0x4}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) 13m49.09339831s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000000c0)={0x800080, 0x0, 0x0, 0x0, 0xa965, 0x2}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x80000, 0x23) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) 13m45.590588076s ago: executing program 1 (id=231): ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xe6d85) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x36, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 13m43.252818534s ago: executing program 1 (id=238): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='ufshcd_clk_scaling\x00', r0, 0x0, 0x4}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$9p(0x0, 0x4880) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x20008040) 13m27.975173926s ago: executing program 33 (id=238): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)='ufshcd_clk_scaling\x00', r0, 0x0, 0x4}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$9p(0x0, 0x4880) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x20008040) 4m23.914821957s ago: executing program 3 (id=1038): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab15300874885", 0x57, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000180)='./file1\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='R', 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) 4m20.531668828s ago: executing program 3 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf1c09000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004440)={0x2020}, 0xffffffffffffffe4) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000004280)='binder\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, 0x0, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r6, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@uname={'uname', 0x3d, '}\x81{-/}(*'}}, {@dfltuid}], [], 0x6b}}) syz_fuse_handle_req(r3, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) request_key(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4m17.019076876s ago: executing program 3 (id=1048): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) 4m13.992588626s ago: executing program 3 (id=1055): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$eJzs281OGlEUwPEzDGWAftHSdtE0aZMu2o0MoJK400dBGAlxUCNuIC7QF/AZfD9ZGDeuxMyVGeLAQCDCHcL/t4DLPffjXMKFs0EAbKx9+SOGGJLwXvxK527yhu6UAKzIYPj8NACwecxH3RkA0KN/IKr2v7u/rImZCuoCv+XFe348YY3VD/0rkZ/JYdxISyZcX9yK/PPnG9nw9AevJxvE34fCKbX+/7/+/h/ko3ySz5KTL/JV8sP968H8H/OWP+MHAgBgAxhSmBWPGPBOPWbkqOk6RTUy5HBHjfLipcj1Uypenho3f0fnZ6n5hdqpW596DgDjEgvf/xdmcP8nS864/wD0aXe6x1XXdc5j0Ei/zmdgiSxxUysOR17fhiXhnuSbrJyJDF3LpJD3odH/bszb6IV7vGo6BomZozR0fzMBWDb7onVmtzvdrWar2nAazkm5WNyr7G6XKmVbVfb29PoewPoa/frrzgQAAAAAAAAAAAAAACzqm3zXnQIAAACAFVnF/4p0nxEAgNh5DgAA//8r8BcP") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) write$binfmt_script(r0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000000900), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@bsdgroups}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x520, &(0x7f0000000600)="$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") openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 4m10.218260052s ago: executing program 3 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380)=0x15, 0x4) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES64=r3, @ANYRES16=0x0], 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d}) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000001440)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 4m8.056936562s ago: executing program 3 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="00ef0000000000000000306cbb9248884a0e026f7a19c654ccb94591865f12d4a18467ebc2b4db1ed868aab809e16d2c7051649b1ed28e9a33de81bee9c7bb0b06652e36b9a0d62bad349bc47d52beb441ef2f935390a296d18cde6ad2aab691e072ee7234c271529e9998aaf8ea25464ca78a742bb022d6d0e81c3aea493c03432715f209d0bfcf5f452f7743e63674bc96e343ea087dd10cebac0bf80433fe00"/172, @ANYRES16=r6, @ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048880}, 0x800) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000b40)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3m51.601168756s ago: executing program 34 (id=1066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="00ef0000000000000000306cbb9248884a0e026f7a19c654ccb94591865f12d4a18467ebc2b4db1ed868aab809e16d2c7051649b1ed28e9a33de81bee9c7bb0b06652e36b9a0d62bad349bc47d52beb441ef2f935390a296d18cde6ad2aab691e072ee7234c271529e9998aaf8ea25464ca78a742bb022d6d0e81c3aea493c03432715f209d0bfcf5f452f7743e63674bc96e343ea087dd10cebac0bf80433fe00"/172, @ANYRES16=r6, @ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048880}, 0x800) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000000b40)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 12.795003259s ago: executing program 5 (id=1398): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000300)=ANY=[], 0xff, 0x5dcf, &(0x7f0000006940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) fchown(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a801800058005000680"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x1d, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100), 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c10000000000000000000", 0x58}], 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x2f, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f00000003c0)=""/205, 0xcd}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000900)=""/48, 0x30}, {&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000003a00)=""/4103, 0x1007}, {&(0x7f0000000700)=""/42, 0x39}, {&(0x7f00000029c0)=""/4098, 0x1002}], 0xa}, 0x40000042) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setscheduler(r9, 0x6, &(0x7f0000000180)=0x4c11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000100)) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12.511306253s ago: executing program 7 (id=1402): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 11.338252891s ago: executing program 7 (id=1405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x1, 0x4) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x80000000) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4000000}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f000054d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00003af000/0x2000)=nil) munmap(&(0x7f0000652000/0x1000)=nil, 0x1000) mremap(&(0x7f000070b000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f00004d1000/0x3000)=nil) r2 = socket$packet(0x11, 0x2, 0x300) mremap(&(0x7f00005fe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a600020000000000050002000000000085000000000000006500feff0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x200000a, 0x110, r2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 10.559424155s ago: executing program 2 (id=1409): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x2c, 0x0, @void}, 0x10) 10.389637002s ago: executing program 5 (id=1411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r3, 0x0) 9.358121571s ago: executing program 2 (id=1413): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x90000, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x15, 0x3, 0x3, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x27) ioctl$TIOCCBRK(r2, 0x5428) futex_waitv(&(0x7f0000001700)=[{0x8ba, &(0x7f0000000180)=0xfffffffffffffff5, 0x2}, {0x7, &(0x7f00000001c0), 0x82}, {0x7, &(0x7f0000000200)=0x66, 0x2}, {0x10000, 0x0}, {0x5, &(0x7f00000002c0)=0x2, 0x82}, {0x3, &(0x7f0000000300)=0xe5, 0x82}, {0xffff, &(0x7f0000000340)=0x3ff, 0x2}, {0x6, &(0x7f0000000380)=0x80000001, 0x82}, {0xe1b, 0x0, 0x2}, {0x9, &(0x7f0000000400)=0x9, 0x82}, {0x2, &(0x7f0000000480)=0xfff, 0x82}, {0x9, &(0x7f00000004c0)=0x69b, 0x82}, {0x78e55cfd, 0x0, 0x82}, {0x25fa7ef3, &(0x7f0000000640)=0x2, 0x2}, {0x252dedf0, 0x0}, {0xf61b, 0x0, 0x82}, {0x80000001, &(0x7f0000000800)=0xb, 0x82}, {0x2, &(0x7f0000000880)=0x3, 0x82}, {0xffffffff, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x3, &(0x7f0000000d80), 0x2}, {0x1, 0x0, 0x2}], 0x16, 0x0, &(0x7f0000001f40), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r8 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"000000000000000000000300", 0x0, 0x0, {}, {0x200}, 0x0, [0x4, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb]}) 7.768942124s ago: executing program 7 (id=1417): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40448, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize}], [{@uid_gt}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsfloor}]}}, 0x1, 0x0, &(0x7f00000001c0)="74f2d17d08eb800e201f01d1b9016b54a5c2988d3fe5dd64cf1b46ac4a5ee7451fb6a53aa620af82cbb2df445fa63abad7af06810d21ef5c952d4682e3faa95bd9759e70916142d96d74cf8d30206d3079f7") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$UHID_INPUT(r1, &(0x7f0000005600)={0x8, {"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", 0x1000}}, 0x1006) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000300)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000400)=""/92) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000240)={@id={0x2, 0x0, @b}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) lstat(&(0x7f0000001440)='./file1/file2/file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f00000012c0)='./bus\x00', &(0x7f0000001300), &(0x7f0000001400)=@v3={0x3000000, [{0x3, 0xaa3}, {0x40000000, 0x9}], r7}, 0x18, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r8}}, 0x48) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f00000000c0)={@private2, r5}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'dvmrp0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xc}, {0x0, 0x8}, {0x10}}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="64000000680004002cbd7000fbdbdf250a0003000e00000008000500", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="100008800c000100000000000000000308000100000000000c0002000000010000000000060007000100000008000100", @ANYRES32=r12, @ANYBLOB], 0x64}}, 0x20000081) 7.593745618s ago: executing program 5 (id=1418): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x10, 0x0, 0x120}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000e1ffffff00009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x2c, 0x0, @void}, 0x10) 7.467331984s ago: executing program 7 (id=1419): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) write(r0, &(0x7f00000002c0)="03feba85", 0x4) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524"], 0x0) 6.553097041s ago: executing program 5 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab15300874885", 0x57, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000180)='./file1\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') sendmsg$NFT_BATCH(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='R', 0x1}], 0x1, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) 6.447984888s ago: executing program 4 (id=1422): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3}, 0x18) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) 5.192079483s ago: executing program 5 (id=1424): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, ',', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x50, 0x50]}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd08}]}]}, 0x24}}, 0x0) 5.066876675s ago: executing program 4 (id=1425): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) 4.863165007s ago: executing program 4 (id=1426): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) r4 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000380)=0x15, 0x4) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRES16=r3, @ANYRESOCT, @ANYRES64=r3, @ANYRES16=0x0], 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x3d}) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000001440)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 4.671905707s ago: executing program 6 (id=1427): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 4.234909216s ago: executing program 2 (id=1428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0xaf, &(0x7f00000007c0)=""/175}]}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/68, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000480)=""/83, &(0x7f00000001c0)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r3, 0x0) 3.952113647s ago: executing program 5 (id=1429): r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x52, &(0x7f0000001180)=ANY=[@ANYBLOB="120100034ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405039677"], &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x1, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x6a, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x6, 0x24, 0x6, 0x0, 0x0, "b6"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x199, 0x1, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x200, 0xf, 0x6, 0x0, 0x7ff, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5c}, @mbim_extended={0x8, 0x24, 0x1c, 0x74e1, 0x3, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0xb1, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x6}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x5, 0x9e, 0xff, 0xfa}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xcc, &(0x7f0000000440)=@string={0xcc, 0x3, "abbe482997af5c456a1d1170e88c106be6cdb4ab74f960cf8a1e42bc2268de050cb2dd87ad38fde54ae588aa1b8dc666e42004298b3cb77b1e9b5d372eb082474dfca0b420213fbc5a6b936ce525f46340f11c1b8641548c6042bc18f2bf27bf40ee3e176a37715849b8532611658a1051631ce467cdf62b253a3e52e5b533ae1705af936154c4e6358356d7f11d4cd856364a27c08d6ec007d66b9bcdf6fea8ff94c6a4f3030ab47603b4c68eb25cbacbb72a5d526a6e301563d5501e3a992b0cd75d4566921f057797"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000240)='./file1\x00', 0xb46825, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="1cb69041b274dca992c60b64bae386e030b548e55dfe6a2d05a20aec8c9303ece6bac6e2a71fc6898e394fad2d658e7821b7c52bb86d48309c18f8fce51de5e335cb21a7f47355d784aed534f5f3a2fd53d996f877b8e06bdbf4ee3512337061ed59f1d2ad4da0d8b518fdaea3d3a0986885b4107a2164146dc906d54847f7375a15afb8993532edcda306e0cc626c779998c251768d8ae18152846be948ea4e12a5618ff2b3e8a90098054b4aef80ae3bb4454654bd1595660fa463d39f4e0233775258bbac", @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=r0], 0x1, 0x153, &(0x7f00000002c0)="$eJzs27GKE0EcBvB/TNSoIKnFYsHGKqhPoEgEcUFRUmilEG0SCZhmtcqj5Al8GZ9DkFTpRu72SO5CUtyRzcLt79fsBx+zzBS7wyzs54ffx6Pp7Nv03TK6rVZ0nkcWq1b04ka0ozQPAOA6WaUU/1JK6fY87iwipVT3jACAqtn/AaB57P8A0Dz2fwBong8fP715keeD91nWjfg7L4bFsLyW/avX+eBJdqq3GbUsimF73T8t++xifzPunvXPdva34vGjsj/pXr7Nt/p7Map++QAAANAI/Wxt5/m+39/Xl+nc94Gt83snHnSOtgwA4BJmP3+Nv0wmX38cKvz5feAbVhoWVx9+v/bJC0J1oe43E1C1zUNf90wAAAAAAAAAAAAAAIB9jvE7Ud1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG3/AwAA///b5lKP") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 3.951572252s ago: executing program 4 (id=1430): syz_mount_image$minix(&(0x7f0000000480), &(0x7f0000000000)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x192, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 3.842062487s ago: executing program 6 (id=1431): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x20, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x11a}, {&(0x7f0000000180)="518cf9569f61ae87e9e450447422ed8ab8e2d292b9e8f1", 0x17}, {&(0x7f0000000a00)="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", 0x1d5}, {&(0x7f0000000280)="661da68e4cccac69431df174bbce91246fce262b3de6a53334d329a142ae0f304e4fbde8fab4d68bedcd182b41227278c65f7de3723a93dbbaeb901b447fb35a9f3f4b671a3e3929c119f9deec5e46cdbe5cac679cad88c9aa61bc7ffd219a18b36ef0bf5ca45da80aa46274c5cda17a4b8588c492dcdd43dee797fe7debf7c1143177d4f4b02255ca5a46", 0x8b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="72126509caec095807090dba7a3967d9884ce638db1b533a4b22559bf9166ba1568930c85350c8e4c4bc40d2f21c8042ef5f78d0c8450382c66ea27d01387272ddb6350a1b9df7af8dc636bd2a4e14c5ead6ff46562bbb74e63c835b9827f0b5be88de7ea0b09ad394495e7a2e45da891ae90f972844a04ac9427903a3102cc8ec0030873c527172f369fc7d7ebe01950d7c3c1a1df3b5c2c7940b81f27ed3e5bbb9db01d84e36e67763cde8eb69ed38a8401e2c6daa808897bf60b8b795aac9afe46e918edb28ea6fe06a6afcfad209e55826dc2000a46b358665fdfee08e82c24a22ef3e7c3a54", 0xe8}, {&(0x7f0000000740)="5cab1cd4b86d9e0da57f099176822a04ecde038848fba14590ae331a739346dc6190b07b965aa699ddce8f182904e77610ec7a7dc1d5d26910106a44c9e64c5cf9ec24913c80b2becf4f62a702b3a50aca7e4c8628d3cd7d516e100d405af3836536855569b7b0d4a08000ba350782e7bc5314e64a335b29276cdccd0ee4fca0af2959e1f24ae3a95d9d933072aca501482711e55efeb5949058eeee27c8c38049042296c44a755d4827a42f8ef16d3d1b79a642373b9299ade2671c111ab642f22f574742974947ccd364ad", 0xcc}, {&(0x7f0000000200)="2807eb239ed0436e9e6e49955dfb4a4d3e1fb254c484ed2da2060d16fe61161b8cdf744a18e00a9b61fc0e090f175efa", 0x30}, {&(0x7f0000000480)="be604475647d7a29472269b80db06ea99d16a1e23f58504441c02e955c5499b328b1bd19909555679e3bbb39e23235037223da6566635d09c0a7192acce97d05ae3077ffe54c98d0c06a98319bc853f4c0177977cff5e33badeed08f6d2ff80d19c30d111c2b98cd96a0f57677161d34c64fb37365fb0ffa931bc4915658f185a359953910493f692868399f95a8", 0x8e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000880)="9b94bd4f7c3a6ece62bebec3ebc3f6245c2cf71ebb80b25d12176c9248f03c509f9c9efa61aac34738d5eb54550e4ee1a5e35c2b82abfcd8c85c175b38e97da83e872522954d2a5ec48d8fa0f5363f20ca098ee73815ead5dccd3b", 0x5b}], 0x1}}], 0x4, 0x2000c044) sendto$inet(r1, &(0x7f0000000540)=';T', 0x2, 0x80, 0x0, 0x0) 3.794335887s ago: executing program 4 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 3.692869239s ago: executing program 6 (id=1433): openat$audio1(0xffffff9c, 0x0, 0x2041, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setresuid(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x14) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.655608758s ago: executing program 7 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a847", 0x0, 0xf00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0xfffe, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2.107171813s ago: executing program 2 (id=1435): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030104000000"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="b40000ee75cf4412a2ecde44759a8168dbf47c00000000f2dc0000000000000084f5366fd600a252ea0d88b07a4c3e9fab944bc887db1787d9f53e6650254a3b509996d598cde66ecab748ffffffffff3f0100"/98, @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000a40)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0x44, 0x4, 0x440, 0xffffffff, 0xd0, 0x2a0, 0x2a0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@private2, @mcast2, [], [], 'hsr0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) ftruncate(r0, 0x8001) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000540)={@broadcast, @private=0xa010100}, 0xc) 2.091880326s ago: executing program 7 (id=1436): open(&(0x7f0000000040)='./file0/../file0\x00', 0x14800, 0x44) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x3, 0x316}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140), &(0x7f0000000500)=0x0, &(0x7f0000000240)) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0xfc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00003f2000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mincore(&(0x7f00002fc000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/4096) 2.015747739s ago: executing program 6 (id=1437): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000080)=ANY=[], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="50a30be1"], 0x118) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000140)={0x3ff, r3, 0x1}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00') ioctl$RNDADDENTROPY(r2, 0x40045201, &(0x7f0000000000)=ANY=[]) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3}, 0x18) sendmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) 1.615223509s ago: executing program 6 (id=1438): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x10080, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1, 0x154, &(0x7f0000000200)="$eJzszz9rGnEYwPHvef4praJQS22HVujQQ7GeJ3YrRUulB7UHLS4dSkGvtKBVFMKNyZAtQ17ADSFCJnFI8gKMyZJEIZjXcZAhkDXcnRISMmX+fZa7+z4PD9znDzOFBMj4PnXa3Z7Z75vN9HejVv2xu+/3CPDIe2t3ezLPzcX+uAx/3WcQnDVoAocx+POvZb5rdFrut1MGBag8cXsIFX/3sduS/m5h0ZQ3MHnmN+2eVly0l0GoxL3G0lsJAtzcuwSs9J4/1HOZnV8y63r29VMJLDs7Gp58mx7rucwrc0OrvhhEUzJ182jb+03LPs/LubP8aDifTWtfjZoxK2ra+6JaUNXS3Did6qXVTYJfoivw8869cBioQ1cCW4KhN3fGUgyYbF0Z7XgkCVz8T4Bk2c7BcgK3J43fqdDgYzIRQFaQEARBEARBEARBEIQHug4AAP//X0hgmg==") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 874.423513ms ago: executing program 2 (id=1439): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0xe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@mpls_mc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xc, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=r3, 0x4) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000080)={0x8, 0x6}) 726.61466ms ago: executing program 2 (id=1440): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0x10000) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) 370.704134ms ago: executing program 4 (id=1441): syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x380801c, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5571, &(0x7f0000001a00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x80}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x1c303911) keyctl$read(0xb, r2, &(0x7f0000000340)=""/172, 0xfffffffffffffe69) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x3, 0x101}, {0x6, 0x80000001}, 0x965}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1442): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000280), &(0x7f0000000340)=0xc) chdir(&(0x7f00000001c0)='./file0\x00') r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) write$sequencer(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ff090500ff023710cf26d34abd792b5d86195eee9c2383c78b18adc23d90fe2f3c82aadec860c2bac500c415e9df0dbe82a283872a79c9aede50a82ec37608a57a97191aecc30873eed981e0575971f249e2a501180258d0d3910b04b3e7d740cac70918e95de584a33dda4e9deea395a8cd2d69f31d13161b79429cfc109957541d9c5864430b022e6ca580208fab2be8de1f94d69841b4e40357f931a39d41"], 0x8) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000c40)="9d8d645e53b618", 0x7) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001bc0)={{r8}, 0x0, 0x4, @unused=[0x16e7b3bd, 0x6, 0x3, 0x4], @devid=r9}) kernel console output (not intermixed with test programs): 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 683.486720][T10700] loop4: detected capacity change from 0 to 512 [ 683.519519][T10701] syz.5.987 (10701): drop_caches: 2 [ 683.525363][T10701] syz.5.987 (10701): drop_caches: 2 [ 683.654952][T10700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 683.771981][T10700] EXT4-fs (loop4): 1 truncate cleaned up [ 683.793705][T10700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.842455][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.028740][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 685.030777][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.501496][T10713] overlayfs: missing 'lowerdir' [ 685.553623][T10710] overlayfs: failed to resolve './file1': -2 [ 685.737507][T10720] loop3: detected capacity change from 0 to 128 [ 686.661158][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.667489][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.894126][T10723] loop4: detected capacity change from 0 to 1024 [ 689.337541][T10726] loop2: detected capacity change from 0 to 512 [ 689.508538][T10726] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 689.591507][T10726] EXT4-fs (loop2): 1 truncate cleaned up [ 689.659217][T10720] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 689.672896][T10720] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.711314][T10726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 689.853622][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 690.136640][T10737] loop5: detected capacity change from 0 to 128 [ 690.918767][T10739] loop6: detected capacity change from 0 to 1024 [ 691.847574][T10737] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 691.860246][T10737] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.925178][T10737] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 18: comm syz.5.993: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 692.289053][T10737] EXT4-fs error (device loop5) in do_split:2055: Corrupt filesystem [ 693.269209][T10735] loop4: detected capacity change from 0 to 1024 [ 693.792785][T10750] loop6: detected capacity change from 0 to 512 [ 693.816412][T10750] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 694.073215][ T6149] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 694.084365][T10750] EXT4-fs (loop6): 1 truncate cleaned up [ 694.124594][T10750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.217196][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.611948][T10758] syz.3.995 (10758): drop_caches: 2 [ 694.622012][T10758] syz.3.995 (10758): drop_caches: 2 [ 696.113129][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.104516][T10773] loop5: detected capacity change from 0 to 128 [ 698.398830][T10773] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 698.422135][T10779] loop4: detected capacity change from 0 to 1024 [ 698.527825][T10773] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.486931][T10779] hfsplus: failed to load extents file [ 699.535862][T10789] loop6: detected capacity change from 0 to 512 [ 699.588185][T10784] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 18: comm syz.5.1001: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 699.703719][T10784] EXT4-fs error (device loop5) in do_split:2055: Corrupt filesystem [ 699.780160][T10789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 699.803538][T10788] loop2: detected capacity change from 0 to 512 [ 699.864006][T10789] EXT4-fs (loop6): 1 truncate cleaned up [ 699.885875][T10788] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 699.909602][T10789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.982442][T10788] EXT4-fs (loop2): 1 truncate cleaned up [ 699.989416][T10788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.046647][ T6149] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 702.070292][T10798] loop3: detected capacity change from 0 to 128 [ 702.596174][T10800] loop4: detected capacity change from 0 to 1024 [ 703.128167][T10798] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 703.128275][T10798] EXT4-fs: failed to create workqueue [ 703.143334][T10798] EXT4-fs (loop3): mount failed [ 704.001045][T10729] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 704.149716][T10729] EXT4-fs (loop2): Remounting filesystem read-only [ 704.227934][T10800] hfsplus: failed to load catalog file [ 704.833128][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.839263][T10811] loop4: detected capacity change from 0 to 512 [ 704.842470][T10810] loop5: detected capacity change from 0 to 512 [ 704.849755][T10811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 704.865439][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.906979][T10811] EXT4-fs (loop4): 1 truncate cleaned up [ 704.913695][T10811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.976431][T10810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 705.307923][T10822] overlayfs: missing 'lowerdir' [ 705.354506][T10815] overlayfs: missing 'lowerdir' [ 706.019303][T10810] EXT4-fs (loop5): 1 truncate cleaned up [ 706.026397][T10810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.181457][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.280494][T10821] syz.2.1011 (10821): drop_caches: 2 [ 706.292118][T10821] syz.2.1011 (10821): drop_caches: 2 [ 706.387421][T10826] loop6: detected capacity change from 0 to 512 [ 706.450510][T10826] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 706.824775][T10826] EXT4-fs (loop6): 1 truncate cleaned up [ 707.315789][T10826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 707.342648][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.866972][T10837] loop4: detected capacity change from 0 to 128 [ 710.692009][T10837] EXT4-fs: error -4 creating inode table initialization thread [ 710.700398][T10837] EXT4-fs (loop4): mount failed [ 712.609993][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.854876][T10850] loop5: detected capacity change from 0 to 47 [ 713.927855][T10857] MINIX-fs: deleted inode referenced: 9 [ 714.449767][T10857] MINIX-fs: deleted inode referenced: 9 [ 714.456024][T10857] MINIX-fs: deleted inode referenced: 9 [ 714.617832][T10857] MINIX-fs: deleted inode referenced: 9 [ 714.623718][T10857] MINIX-fs: deleted inode referenced: 9 [ 715.220982][T10858] loop6: detected capacity change from 0 to 128 [ 716.430204][T10858] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 716.430301][T10858] EXT4-fs: failed to create workqueue [ 716.445320][T10858] EXT4-fs (loop6): mount failed [ 716.489950][T10860] syz.4.1018 (10860): drop_caches: 2 [ 716.602080][T10864] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 716.720849][T10867] loop5: detected capacity change from 0 to 512 [ 716.755734][T10868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 716.787835][T10867] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 716.868796][T10867] EXT4-fs (loop5): 1 truncate cleaned up [ 716.875397][T10867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.280559][T10876] loop3: detected capacity change from 0 to 2048 [ 718.292593][T10874] loop2: detected capacity change from 0 to 47 [ 718.752962][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.769165][T10876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.742444][T10889] loop6: detected capacity change from 0 to 128 [ 719.750926][T10880] MINIX-fs: deleted inode referenced: 9 [ 719.758753][T10880] MINIX-fs: deleted inode referenced: 9 [ 719.772290][T10876] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.797048][T10880] MINIX-fs: deleted inode referenced: 9 [ 719.809528][T10874] MINIX-fs: deleted inode referenced: 9 [ 719.889463][T10874] MINIX-fs: deleted inode referenced: 9 [ 719.924093][T10895] futex_wake_op: syz.3.1021 tries to shift op by -1; fix this program [ 719.976696][T10889] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 719.989542][T10889] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.010350][T10889] EXT4-fs error (device loop6): dx_make_map:1328: inode #2: block 18: comm syz.6.1023: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 720.053954][T10889] EXT4-fs error (device loop6) in do_split:2055: Corrupt filesystem [ 721.150557][ T7209] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 721.167873][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.406838][T10904] loop4: detected capacity change from 0 to 1024 [ 722.068802][T10907] syz.6.1029 (10907): drop_caches: 2 [ 722.080866][T10907] syz.6.1029 (10907): drop_caches: 2 [ 722.234421][T10911] loop5: detected capacity change from 0 to 1024 [ 722.748633][T10915] loop2: detected capacity change from 0 to 1024 [ 723.313437][T10920] loop4: detected capacity change from 0 to 512 [ 723.328644][T10920] EXT4-fs (loop4): orphan cleanup on readonly fs [ 723.335936][T10920] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 723.346470][T10920] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 723.355979][T10920] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1030: Failed to acquire dquot type 1 [ 723.369683][T10920] EXT4-fs (loop4): 1 truncate cleaned up [ 723.407438][T10911] hfsplus: failed to load extents file [ 723.469937][T10920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 724.570093][T10929] loop6: detected capacity change from 0 to 1024 [ 725.277034][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.418237][T10938] overlayfs: missing 'lowerdir' [ 726.672761][T10945] loop3: detected capacity change from 0 to 1024 [ 728.353259][T10954] loop6: detected capacity change from 0 to 1024 [ 728.414536][T10957] overlayfs: missing 'lowerdir' [ 729.618693][T10964] loop3: detected capacity change from 0 to 1024 [ 729.850698][T10961] loop4: detected capacity change from 0 to 1024 [ 730.458775][T10966] loop2: detected capacity change from 0 to 512 [ 730.477657][T10966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 730.557517][T10969] loop6: detected capacity change from 0 to 2048 [ 730.589069][T10966] EXT4-fs (loop2): 1 truncate cleaned up [ 730.595178][T10971] loop5: detected capacity change from 0 to 512 [ 730.605595][T10969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.620616][T10966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.692688][T10971] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 730.697448][T10969] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.752568][T10971] EXT4-fs (loop5): 1 truncate cleaned up [ 730.753460][T10971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.192471][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.195992][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.204015][T10969] futex_wake_op: syz.6.1041 tries to shift op by -1; fix this program [ 732.375167][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.712893][T10995] overlayfs: missing 'lowerdir' [ 733.928767][T10998] 9pnet_fd: Insufficient options for proto=fd [ 734.779490][T11003] loop6: detected capacity change from 0 to 1024 [ 735.340957][T10990] loop4: detected capacity change from 0 to 2048 [ 735.385771][T11003] hfsplus: xattr search failed [ 735.391040][T11003] hfsplus: unable to mark blocks free: error -4 [ 735.415111][T11003] hfsplus: can't free extent [ 735.420578][T11004] hfsplus: xattr search failed [ 735.559338][T11012] loop3: detected capacity change from 0 to 2048 [ 736.526613][T10990] EXT4-fs: failed to create workqueue [ 736.615088][T10990] EXT4-fs (loop4): mount failed [ 736.649117][T11013] overlayfs: missing 'lowerdir' [ 736.655820][T11012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.687937][T11012] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.732036][T11022] loop5: detected capacity change from 0 to 1024 [ 737.072240][T11012] futex_wake_op: syz.3.1048 tries to shift op by -1; fix this program [ 737.268083][T11028] loop2: detected capacity change from 0 to 512 [ 737.525973][T11032] loop6: detected capacity change from 0 to 1024 [ 738.316666][T11037] loop5: detected capacity change from 0 to 512 [ 738.600339][T11028] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 738.611563][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.642316][T11028] EXT4-fs (loop2): 1 truncate cleaned up [ 738.648802][T11037] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 738.675132][T11028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.708878][T11037] EXT4-fs (loop5): 1 truncate cleaned up [ 738.739945][T11037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.867041][T11044] overlayfs: missing 'lowerdir' [ 739.672126][T11047] loop3: detected capacity change from 0 to 512 [ 739.685254][T11047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 739.735310][T11047] EXT4-fs (loop3): 1 truncate cleaned up [ 739.743043][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.753331][T11047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.763171][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.863754][T11052] overlayfs: missing 'lowerdir' [ 741.955912][T11058] loop4: detected capacity change from 0 to 1024 [ 741.993949][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.016234][T11070] loop2: detected capacity change from 0 to 128 [ 742.071177][T11070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 742.108372][T11074] loop5: detected capacity change from 0 to 2048 [ 742.132552][T11070] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.210601][T11068] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.1060: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 742.248691][T11074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.285078][T11074] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.296432][T11068] EXT4-fs error (device loop2) in do_split:2055: Corrupt filesystem [ 742.392823][T11085] overlayfs: missing 'lowerdir' [ 742.400392][ T5842] Bluetooth: hci0: ISO packet for unknown connection handle 2097 [ 742.466914][T11086] futex_wake_op: syz.5.1063 tries to shift op by -1; fix this program [ 743.236867][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 743.258737][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.632694][T11094] loop3: detected capacity change from 0 to 128 [ 744.733473][T11102] loop6: detected capacity change from 0 to 1024 [ 745.415406][T11105] loop2: detected capacity change from 0 to 512 [ 745.422956][T11094] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 745.481326][T11105] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 745.533790][T11105] EXT4-fs (loop2): 1 truncate cleaned up [ 745.739170][T11105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.775248][T11094] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.818010][T11094] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 18: comm syz.3.1066: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 745.848543][T11094] EXT4-fs error (device loop3) in do_split:2055: Corrupt filesystem [ 746.006818][T11112] loop4: detected capacity change from 0 to 128 [ 748.075444][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.082595][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.137202][T11112] EXT4-fs: error -4 creating inode table initialization thread [ 749.145494][T11112] EXT4-fs (loop4): mount failed [ 749.860386][T11123] loop6: detected capacity change from 0 to 1024 [ 750.337090][T11125] loop4: detected capacity change from 0 to 512 [ 750.478726][T11125] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 750.484804][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.573603][T11125] EXT4-fs (loop4): 1 truncate cleaned up [ 750.582973][T11125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.727269][T11133] loop2: detected capacity change from 0 to 512 [ 751.807745][T11133] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 751.936243][T11139] loop6: detected capacity change from 0 to 512 [ 751.943442][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.975586][T11139] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 752.120595][T11133] EXT4-fs (loop2): 1 truncate cleaned up [ 752.161589][T11133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.174382][T11139] EXT4-fs (loop6): 1 truncate cleaned up [ 752.239232][T11139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.412558][T11145] loop5: detected capacity change from 0 to 1024 [ 754.217584][T11149] loop4: detected capacity change from 0 to 512 [ 755.176493][T11144] hfsplus: xattr search failed [ 755.185745][T11144] hfsplus: unable to mark blocks free: error -4 [ 755.192043][T11144] hfsplus: can't free extent [ 755.198224][T11145] hfsplus: xattr search failed [ 755.516492][T11149] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 755.863190][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.895442][T11149] EXT4-fs (loop4): 1 truncate cleaned up [ 755.916292][T11149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.946854][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.473961][T11157] overlayfs: missing 'lowerdir' [ 757.752202][T11164] loop2: detected capacity change from 0 to 128 [ 757.838321][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.901007][T11164] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 757.923998][T11164] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.990302][T11164] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 18: comm syz.2.1079: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 758.048168][T11164] EXT4-fs error (device loop2) in do_split:2055: Corrupt filesystem [ 759.037555][T11172] overlayfs: failed to resolve './file1': -2 [ 760.738970][T11183] loop6: detected capacity change from 0 to 1024 [ 761.150702][T11187] overlayfs: missing 'lowerdir' [ 761.720901][T11193] loop5: detected capacity change from 0 to 512 [ 761.768956][ T5839] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.807760][T11193] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 761.983915][T11193] EXT4-fs (loop5): 1 truncate cleaned up [ 762.015360][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 762.018573][T11193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.029646][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 762.047250][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 762.058617][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 762.066259][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 762.081772][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 762.166546][T11206] loop4: detected capacity change from 0 to 128 [ 762.613770][T11209] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 762.672400][T11209] loop6: detected capacity change from 0 to 1024 [ 763.095542][T11200] loop2: detected capacity change from 0 to 2048 [ 763.300583][T11200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.591553][T11200] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.249348][T11206] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 764.961036][T11214] futex_wake_op: syz.2.1086 tries to shift op by -1; fix this program [ 764.970183][T11206] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.017871][T11198] Bluetooth: hci4: command tx timeout [ 765.029969][T11205] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 18: comm syz.4.1089: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 765.053306][T11205] EXT4-fs error (device loop4) in do_split:2055: Corrupt filesystem [ 765.071087][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.329069][ T5827] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.338978][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.446649][T11220] loop5: detected capacity change from 0 to 128 [ 765.549359][T11220] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 765.637516][T11220] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.457115][T11093] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 766.639880][T11228] loop2: detected capacity change from 0 to 512 [ 767.655938][T11198] Bluetooth: hci4: command tx timeout [ 768.161852][T11236] loop6: detected capacity change from 0 to 1024 [ 768.578480][T11237] loop4: detected capacity change from 0 to 128 [ 768.977997][T11228] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 768.978860][ T3545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.051385][T11237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 769.064641][ T6149] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.079432][T11237] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.138604][T11196] chnl_net:caif_netlink_parms(): no params data found [ 769.141323][T11228] EXT4-fs (loop2): 1 truncate cleaned up [ 769.158020][T11228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.381555][ T5827] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 770.223965][ T3545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.273796][T11198] Bluetooth: hci4: command tx timeout [ 770.474562][T11247] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 770.531210][T11247] loop5: detected capacity change from 0 to 1024 [ 771.092436][T11250] loop4: detected capacity change from 0 to 512 [ 771.141633][T11250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 771.146542][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.186141][T11250] EXT4-fs (loop4): 1 truncate cleaned up [ 771.246435][T11250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.713954][T11259] overlayfs: missing 'lowerdir' [ 772.656469][T11267] overlayfs: missing 'lowerdir' [ 773.801976][ T5842] Bluetooth: hci4: command tx timeout [ 773.803693][T11196] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.814776][T11196] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.822049][T11196] bridge_slave_0: entered allmulticast mode [ 773.829227][T11196] bridge_slave_0: entered promiscuous mode [ 773.878827][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.022876][T11271] loop6: detected capacity change from 0 to 2048 [ 774.071760][T11275] loop5: detected capacity change from 0 to 2048 [ 774.086904][ T3545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.224594][T11271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.382741][T11283] overlayfs: missing 'lowerdir' [ 774.743691][T11287] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 774.795011][T11287] loop2: detected capacity change from 0 to 1024 [ 774.856613][T11271] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.859684][T11196] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.874505][T11196] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.882839][T11196] bridge_slave_1: entered allmulticast mode [ 774.890582][T11275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.891700][T11196] bridge_slave_1: entered promiscuous mode [ 774.921339][T11275] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.947354][T11271] futex_wake_op: syz.6.1101 tries to shift op by -1; fix this program [ 774.972490][ T3545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.100143][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.120152][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.133452][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.200534][T11275] futex_wake_op: syz.5.1102 tries to shift op by -1; fix this program [ 775.213625][T11293] loop2: detected capacity change from 0 to 512 [ 775.231577][T11196] team0: Port device team_slave_0 added [ 775.256910][T11293] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 775.318734][T11293] EXT4-fs (loop2): 1 truncate cleaned up [ 775.322226][T11297] loop6: detected capacity change from 0 to 512 [ 775.325403][T11293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.341009][T11297] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 775.376323][T11297] EXT4-fs (loop6): 1 truncate cleaned up [ 775.386351][T11297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.398940][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.675138][T11196] team0: Port device team_slave_1 added [ 777.667912][T11291] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 777.677975][T11294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 777.974643][T11314] overlayfs: missing 'lowerdir' [ 778.972821][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.982111][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.010618][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.023648][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.031285][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.073283][T11319] loop5: detected capacity change from 0 to 512 [ 779.083073][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.104406][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.133858][T11319] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 779.176583][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.442128][T11319] EXT4-fs (loop5): 1 truncate cleaned up [ 779.823421][T11319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.570618][ T3545] bridge_slave_1: left allmulticast mode [ 780.574441][T11324] tty tty29: ldisc open failed (-12), clearing slot 28 [ 780.590067][T11326] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 780.617550][ T3545] bridge_slave_1: left promiscuous mode [ 780.623758][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.818434][ T3545] bridge_slave_0: left allmulticast mode [ 780.824137][ T3545] bridge_slave_0: left promiscuous mode [ 780.895422][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.866672][T11341] overlayfs: missing 'lowerdir' [ 782.848770][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.986758][T11347] loop4: detected capacity change from 0 to 1024 [ 784.383258][T11348] loop2: detected capacity change from 0 to 2048 [ 784.460220][T11348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.472706][T11348] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.498374][T11348] futex_wake_op: syz.2.1115 tries to shift op by -1; fix this program [ 784.530682][T11355] loop5: detected capacity change from 0 to 1024 [ 784.604239][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.985222][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 785.986038][T11198] Bluetooth: hci0: command 0x1003 tx timeout [ 792.081923][T11389] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 792.142309][T11389] loop6: detected capacity change from 0 to 1024 [ 792.666874][T11391] loop5: detected capacity change from 0 to 128 [ 792.933733][T11391] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 792.948178][T11391] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.441406][T11387] syz.2.1122 (11387): drop_caches: 2 [ 793.496860][T11387] syz.2.1122 (11387): drop_caches: 2 [ 794.020040][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.047133][T11403] loop4: detected capacity change from 0 to 2048 [ 794.111545][T11403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.156021][T11403] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.189969][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.522706][T11403] futex_wake_op: syz.4.1127 tries to shift op by -1; fix this program [ 794.554076][ T3545] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 794.692368][T11411] loop2: detected capacity change from 0 to 1024 [ 795.307733][ T3545] bond0 (unregistering): Released all slaves [ 795.375961][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.029015][T11417] overlayfs: missing 'lowerdir' [ 798.255622][ T3545] bond1 (unregistering): Released all slaves [ 798.451822][T11423] loop6: detected capacity change from 0 to 1024 [ 799.279427][ T3545] bond2 (unregistering): Released all slaves [ 799.563419][ T3545] bond3 (unregistering): Released all slaves [ 799.810734][ T3545] bond4 (unregistering): Released all slaves [ 800.038164][ T3545] bond5 (unregistering): Released all slaves [ 800.128183][T11438] syz.6.1134 (11438): drop_caches: 2 [ 800.166754][T11438] syz.6.1134 (11438): drop_caches: 2 [ 800.172093][ T6149] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 800.186527][T11196] hsr_slave_0: entered promiscuous mode [ 800.214079][T11196] hsr_slave_1: entered promiscuous mode [ 800.261418][T11196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.277269][T11196] Cannot create hsr debugfs directory [ 801.403529][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 802.378685][T11469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 802.387935][T11469] overlayfs: missing 'lowerdir' [ 803.638477][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 805.485723][T11196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 805.540303][T11196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 805.609656][T11196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 805.669416][T11196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 805.820005][T11486] overlayfs: missing 'lowerdir' [ 806.769833][T11494] overlayfs: missing 'lowerdir' [ 807.744413][T11196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.764778][T11196] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.014327][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.021510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.514231][T11499] loop2: detected capacity change from 0 to 1024 [ 808.579300][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.586450][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.766672][T11196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.777329][T11196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.580148][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.586489][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.701364][ T3545] hsr_slave_0: left promiscuous mode [ 809.910386][ T3545] hsr_slave_1: left promiscuous mode [ 810.131666][T11515] loop4: detected capacity change from 0 to 1024 [ 810.293443][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.680489][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.793378][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.801042][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.179215][ T3545] veth1_macvtap: left promiscuous mode [ 811.184764][ T3545] veth0_macvtap: left promiscuous mode [ 811.235459][ T3545] veth1_vlan: left promiscuous mode [ 811.501253][ T3545] veth0_vlan: left promiscuous mode [ 812.014591][T11527] Bluetooth: hci0: command 0x1003 tx timeout [ 812.073897][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 815.827863][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 817.046987][T11546] loop2: detected capacity change from 0 to 1024 [ 819.848578][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 821.039204][T11561] loop5: detected capacity change from 0 to 2048 [ 821.290985][T11561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.303672][T11561] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.326452][T11561] futex_wake_op: syz.5.1154 tries to shift op by -1; fix this program [ 821.390596][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.565237][T11572] loop6: detected capacity change from 0 to 1024 [ 821.750641][T11527] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 821.773973][T11527] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 821.787839][T11527] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 821.798532][T11527] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 821.806425][T11527] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 821.813887][T11527] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 823.190413][T11584] loop5: detected capacity change from 0 to 8 [ 823.197223][T11584] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 823.246228][T11584] cramfs: Error -5 while decompressing! [ 823.258058][T11584] cramfs: ffffffff9a4cc3a8(8)->ffff8880567cb000(4096) [ 823.264887][T11584] cramfs: Error -3 while decompressing! [ 823.271216][T11584] cramfs: ffffffff9a4cc3b0(44)->ffff8880567cc000(4096) [ 823.278585][T11584] cramfs: Error -3 while decompressing! [ 823.287971][ T5842] Bluetooth: hci0: command 0x1003 tx timeout [ 823.307440][T11584] cramfs: ffffffff9a4cc3dc(16)->ffff8880567cd000(4096) [ 823.314694][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 823.443472][T11584] cramfs: Error -5 while decompressing! [ 823.480743][T11584] cramfs: ffffffff9a4cc3a8(8)->ffff8880567cb000(4096) [ 823.543079][ T29] audit: type=1800 audit(1732526767.804:94): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1157" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 823.829421][T11589] loop6: detected capacity change from 0 to 1024 [ 823.927743][ T5837] Bluetooth: hci6: command tx timeout [ 824.896704][T11527] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 825.596275][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 826.763868][T11527] Bluetooth: hci6: command tx timeout [ 827.296448][T11611] loop6: detected capacity change from 0 to 1024 [ 827.361159][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 829.527834][ T5837] Bluetooth: hci6: command tx timeout [ 831.689677][T11527] Bluetooth: hci6: command tx timeout [ 832.543687][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 834.567766][T11198] Bluetooth: hci0: command 0x1003 tx timeout [ 834.574455][T11527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 834.781134][T11649] loop4: detected capacity change from 0 to 1024 [ 836.007868][ T5837] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 836.176248][ T5842] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 836.546887][T11575] chnl_net:caif_netlink_parms(): no params data found [ 837.635984][ T35] Bluetooth: hci4: Frame reassembly failed (-84) [ 839.285911][T11575] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.899385][ T5842] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 839.908505][T11575] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.917199][T11575] bridge_slave_0: entered allmulticast mode [ 839.935304][ T5842] Bluetooth: hci4: command 0x1003 tx timeout [ 840.012548][T11575] bridge_slave_0: entered promiscuous mode [ 840.068870][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 840.091184][T11575] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.156055][T11696] loop4: detected capacity change from 0 to 1024 [ 840.178009][T11575] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.193525][T11575] bridge_slave_1: entered allmulticast mode [ 840.209261][T11575] bridge_slave_1: entered promiscuous mode [ 841.531405][T11575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.570696][T11575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.698885][T11707] overlayfs: missing 'lowerdir' [ 842.475614][ T5837] Bluetooth: hci7: command 0x1003 tx timeout [ 842.482657][T11527] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 842.795184][T11575] team0: Port device team_slave_0 added [ 843.127893][T11712] loop2: detected capacity change from 0 to 1024 [ 844.120253][T11575] team0: Port device team_slave_1 added [ 845.516265][T11729] loop4: detected capacity change from 0 to 1024 [ 846.540614][T11575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.547890][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.577720][T11575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.698263][T11575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.705527][T11575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.773276][T11575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.881166][ T52] Bluetooth: hci4: Frame reassembly failed (-84) [ 847.282423][T11575] hsr_slave_0: entered promiscuous mode [ 847.288696][T11198] Bluetooth: hci0: command 0x1003 tx timeout [ 847.296365][T11527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 847.762734][T11575] hsr_slave_1: entered promiscuous mode [ 847.796843][T11575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.826860][T11575] Cannot create hsr debugfs directory [ 848.662537][T11763] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 848.728109][T11763] loop5: detected capacity change from 0 to 1024 [ 848.888155][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 849.548617][T11772] loop5: detected capacity change from 0 to 1024 [ 850.739851][ T3545] bridge_slave_1: left allmulticast mode [ 850.745704][ T3545] bridge_slave_1: left promiscuous mode [ 850.758203][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.767289][ T3545] bridge_slave_0: left allmulticast mode [ 850.778265][ T3545] bridge_slave_0: left promiscuous mode [ 850.787103][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.093487][ T6701] Bluetooth: hci4: Frame reassembly failed (-84) [ 851.123544][ T6701] Bluetooth: hci4: Frame reassembly failed (-84) [ 851.769357][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 852.290986][T11787] loop5: detected capacity change from 0 to 1024 [ 852.334027][T11790] loop6: detected capacity change from 0 to 1024 [ 852.673445][ T7214] Bluetooth: hci0: Frame reassembly failed (-84) [ 852.702634][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.732998][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.772427][ T3545] bond0 (unregistering): Released all slaves [ 852.968000][T11527] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 853.386388][T11798] loop4: detected capacity change from 0 to 1024 [ 853.597872][ T3545] hsr_slave_0: left promiscuous mode [ 853.657545][ T3545] hsr_slave_1: left promiscuous mode [ 853.680642][T11804] loop6: detected capacity change from 0 to 1024 [ 853.711811][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 853.734449][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.758089][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 854.875006][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 855.062004][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 857.345892][T11828] loop6: detected capacity change from 0 to 1024 [ 858.446139][T11836] loop4: detected capacity change from 0 to 1024 [ 858.659462][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 858.875059][T11839] loop2: detected capacity change from 0 to 1024 [ 859.855282][T11575] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 859.896911][T11575] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 859.928591][T11198] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 860.022550][T11575] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 860.226400][T11847] loop5: detected capacity change from 0 to 1024 [ 860.555870][T11575] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 860.789036][T11854] loop4: detected capacity change from 0 to 1024 [ 860.846177][T11575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.862704][T11575] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.882887][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.890073][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.004191][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.011382][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.067122][T11858] loop6: detected capacity change from 0 to 1024 [ 861.236061][T11575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.993991][T11575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.328720][T11909] loop4: detected capacity change from 0 to 1024 [ 867.565345][T11575] veth0_vlan: entered promiscuous mode [ 867.609965][T11527] Bluetooth: hci0: command 0x1003 tx timeout [ 867.615429][T11198] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 867.624560][T11575] veth1_vlan: entered promiscuous mode [ 867.716908][T11575] veth0_macvtap: entered promiscuous mode [ 867.730278][T11575] veth1_macvtap: entered promiscuous mode [ 867.748549][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.760733][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.770685][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.781167][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.791176][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.801701][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.811620][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.822188][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.833261][T11575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.842877][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.853672][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.863583][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.874092][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.883987][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.894463][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.904526][T11575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.919602][T11575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.931187][T11575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.941701][T11575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.950654][T11575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.959429][T11575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.968227][T11575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.022403][T11918] loop2: detected capacity change from 0 to 1024 [ 868.504689][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.547594][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.614428][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.643269][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.498321][T11198] Bluetooth: hci4: command 0x1003 tx timeout [ 869.543167][ T5837] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 870.141576][T11938] overlayfs: missing 'lowerdir' [ 870.643681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.650094][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.691880][ T5837] Bluetooth: hci6: ISO packet for unknown connection handle 2097 [ 870.896632][T11942] loop5: detected capacity change from 0 to 512 [ 870.919277][T11942] EXT4-fs (loop5): orphan cleanup on readonly fs [ 870.926164][T11944] loop6: detected capacity change from 0 to 1024 [ 870.936999][T11942] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 870.947504][T11942] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 870.956969][T11942] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1221: Failed to acquire dquot type 1 [ 870.975026][T11942] EXT4-fs (loop5): 1 truncate cleaned up [ 871.004896][T11942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 871.246753][T11947] loop7: detected capacity change from 0 to 1024 [ 871.968777][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.757708][T11979] loop5: detected capacity change from 0 to 1024 [ 875.278324][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 875.854694][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 877.187051][T11198] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 877.195414][ T5837] Bluetooth: hci4: command 0x1003 tx timeout [ 878.412970][T12009] syz.6.1232 (12009): drop_caches: 2 [ 878.434685][T12009] syz.6.1232 (12009): drop_caches: 2 [ 879.417778][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 880.494443][T12024] loop6: detected capacity change from 0 to 1024 [ 880.738388][T12027] loop7: detected capacity change from 0 to 2048 [ 880.923569][T12027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 880.974441][T12027] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.019450][T12037] syz.4.1236 (12037): drop_caches: 2 [ 881.025744][T12037] syz.4.1236 (12037): drop_caches: 2 [ 881.230181][T11575] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.369368][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 883.618217][T12069] loop4: detected capacity change from 0 to 512 [ 883.835548][T12072] overlayfs: missing 'lowerdir' [ 884.149505][T12069] EXT4-fs (loop4): orphan cleanup on readonly fs [ 884.443559][T12074] loop2: detected capacity change from 0 to 8 [ 884.450517][T12074] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 884.504813][T12069] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 884.515759][T12069] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 884.525302][T12069] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1246: Failed to acquire dquot type 1 [ 884.592148][T12074] cramfs: Error -5 while decompressing! [ 884.597991][T12074] cramfs: ffffffff9a4d03a8(8)->ffff88805c3bd000(4096) [ 884.604785][T12074] cramfs: Error -3 while decompressing! [ 884.610625][T12074] cramfs: ffffffff9a4d03b0(44)->ffff88805c3be000(4096) [ 884.617527][T12074] cramfs: Error -3 while decompressing! [ 884.623191][T12074] cramfs: ffffffff9a4d03dc(16)->ffff88805c3bf000(4096) [ 884.630150][T12074] cramfs: Error -5 while decompressing! [ 884.635725][T12074] cramfs: ffffffff9a4d03a8(8)->ffff88805c3bd000(4096) [ 884.795636][T12069] EXT4-fs (loop4): 1 truncate cleaned up [ 884.849414][T12069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 884.934796][ T29] audit: type=1800 audit(1732526828.954:95): pid=12074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1245" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 885.867778][T12084] loop2: detected capacity change from 0 to 512 [ 885.940146][T12084] EXT4-fs (loop2): orphan cleanup on readonly fs [ 885.949131][T12084] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 885.959680][T12084] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 885.969167][T12084] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1248: Failed to acquire dquot type 1 [ 885.994482][T12084] EXT4-fs (loop2): 1 truncate cleaned up [ 886.003257][T12084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 887.008462][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.154186][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.904044][T12098] loop6: detected capacity change from 0 to 2048 [ 889.080931][T12119] 9pnet_fd: Insufficient options for proto=fd [ 889.809813][T12098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.826771][T12098] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.479748][T12100] loop4: detected capacity change from 0 to 1024 [ 890.710460][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.270562][T12152] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 891.397208][T12152] loop6: detected capacity change from 0 to 1024 [ 892.161630][T12154] loop4: detected capacity change from 0 to 2048 [ 892.165038][T12158] loop6: detected capacity change from 0 to 512 [ 892.191652][T12158] EXT4-fs (loop6): orphan cleanup on readonly fs [ 892.199088][T12158] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 892.209597][T12158] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 892.220380][T12158] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1263: Failed to acquire dquot type 1 [ 892.236896][T12158] EXT4-fs (loop6): 1 truncate cleaned up [ 892.247693][T12156] loop2: detected capacity change from 0 to 2048 [ 892.249124][T12154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.280112][T12158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 892.298820][T12154] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.941111][T12154] futex_wake_op: syz.4.1261 tries to shift op by -1; fix this program [ 893.318557][T12168] loop2: detected capacity change from 0 to 2048 [ 893.358930][T12148] loop7: detected capacity change from 0 to 32768 [ 893.383639][T12148] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1260 (12148) [ 893.433647][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.449614][T12148] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 893.463935][T12148] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 893.485615][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.487547][T12168] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.577920][T12168] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 893.742741][T12183] loop5: detected capacity change from 0 to 1024 [ 893.758044][T12168] futex_wake_op: syz.2.1265 tries to shift op by -1; fix this program [ 894.753431][T12185] syz.4.1267 (12185): drop_caches: 2 [ 894.765049][T12185] syz.4.1267 (12185): drop_caches: 2 [ 894.770740][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 894.770981][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 894.783428][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 894.808114][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 894.848145][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 894.858887][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 894.869141][T12148] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 894.981031][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.248961][T12148] BTRFS error (device loop7): open_ctree failed [ 895.446140][T12206] loop6: detected capacity change from 0 to 1024 [ 896.265638][T12209] loop2: detected capacity change from 0 to 2048 [ 896.429591][T12209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.475007][T12209] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 896.652847][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.736224][T12224] loop4: detected capacity change from 0 to 1024 [ 896.791362][T12228] loop7: detected capacity change from 0 to 256 [ 896.905867][T12236] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 897.049263][T12236] syz.2.1277 (12236) used greatest stack depth: 17648 bytes left [ 897.196113][T12247] loop4: detected capacity change from 0 to 2048 [ 897.206883][T12245] loop7: detected capacity change from 0 to 256 [ 897.265152][T12249] loop6: detected capacity change from 0 to 512 [ 897.339739][T12247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 897.345565][T12249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.360796][T12247] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.366454][T12245] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 897.423920][T12247] futex_wake_op: syz.4.1279 tries to shift op by -1; fix this program [ 897.435678][ C1] sd 0:0:1:0: [sda] tag#4851 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 897.446168][ C1] sd 0:0:1:0: [sda] tag#4851 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 00 00 00 [ 897.477874][T12249] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 897.590093][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.660305][T12266] program syz.7.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.685485][T12269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.812841][ T7209] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.889796][T12275] capability: warning: `syz.4.1284' uses 32-bit capabilities (legacy support in use) [ 898.028735][ T5882] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 898.086323][T12280] netlink: 'syz.5.1285': attribute type 11 has an invalid length. [ 898.142635][T12280] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1285'. [ 898.177139][T12290] loop4: detected capacity change from 0 to 2048 [ 898.184371][T12292] FAULT_INJECTION: forcing a failure. [ 898.184371][T12292] name failslab, interval 1, probability 0, space 0, times 1 [ 898.215788][T12292] CPU: 1 UID: 0 PID: 12292 Comm: syz.6.1286 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 898.225742][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 898.235922][T12292] Call Trace: [ 898.239231][T12292] [ 898.242185][T12292] dump_stack_lvl+0x241/0x360 [ 898.246922][T12292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 898.252120][T12292] ? __pfx__printk+0x10/0x10 [ 898.256707][T12292] ? kmem_cache_alloc_noprof+0x48/0x380 [ 898.262258][T12292] ? __pfx___might_resched+0x10/0x10 [ 898.267545][T12292] should_fail_ex+0x3b0/0x4e0 [ 898.272232][T12292] should_failslab+0xac/0x100 [ 898.276920][T12292] ? getname_flags+0xb7/0x540 [ 898.281689][T12292] kmem_cache_alloc_noprof+0x70/0x380 [ 898.287059][T12292] getname_flags+0xb7/0x540 [ 898.291565][T12292] __x64_sys_mkdir+0x5d/0x80 [ 898.296156][T12292] do_syscall_64+0xf3/0x230 [ 898.300688][T12292] ? clear_bhb_loop+0x35/0x90 [ 898.305407][T12292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.311309][T12292] RIP: 0033:0x7f062b17e819 [ 898.315747][T12292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.335352][T12292] RSP: 002b:00007f062beb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 898.343770][T12292] RAX: ffffffffffffffda RBX: 00007f062b336080 RCX: 00007f062b17e819 [ 898.351737][T12292] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000180 [ 898.359714][T12292] RBP: 00007f062beb6090 R08: 0000000000000000 R09: 0000000000000000 [ 898.367684][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.375660][T12292] R13: 0000000000000001 R14: 00007f062b336080 R15: 00007fff96873368 [ 898.383642][T12292] [ 898.397486][ T5882] usb 8-1: Using ep0 maxpacket: 8 [ 898.409735][T12290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.429644][ T5882] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.432872][T12290] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.440378][ T5882] usb 8-1: config 0 has no interface number 0 [ 898.454869][ T5882] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 898.477808][ T5882] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 898.487503][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.498957][ T5882] usb 8-1: config 0 descriptor?? [ 898.553569][ T5882] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 898.641222][T12306] loop2: detected capacity change from 0 to 512 [ 898.680402][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.696477][T12306] EXT4-fs (loop2): orphan cleanup on readonly fs [ 898.703671][T12306] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 898.714792][T12306] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 898.724378][T12306] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1289: Failed to acquire dquot type 1 [ 898.737217][T12306] EXT4-fs (loop2): 1 truncate cleaned up [ 898.744625][T12306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 898.746257][ T5882] usb 8-1: USB disconnect, device number 2 [ 899.562831][T12314] loop5: detected capacity change from 0 to 1024 [ 899.724482][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.148971][T12338] FAULT_INJECTION: forcing a failure. [ 900.148971][T12338] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 900.162184][T12338] CPU: 1 UID: 0 PID: 12338 Comm: syz.4.1293 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 900.172097][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 900.182266][T12338] Call Trace: [ 900.185557][T12338] [ 900.188497][T12338] dump_stack_lvl+0x241/0x360 [ 900.193195][T12338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 900.198409][T12338] ? __pfx__printk+0x10/0x10 [ 900.203032][T12338] ? __pfx_lock_release+0x10/0x10 [ 900.208077][T12338] ? __schedule+0x1858/0x4c30 [ 900.212785][T12338] should_fail_ex+0x3b0/0x4e0 [ 900.217489][T12338] _copy_from_user+0x2f/0xc0 [ 900.222101][T12338] __se_sys_io_uring_setup+0x144/0x330 [ 900.227591][T12338] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 900.233594][T12338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 900.239936][T12338] ? do_syscall_64+0xb6/0x230 [ 900.244632][T12338] do_syscall_64+0xf3/0x230 [ 900.249154][T12338] ? clear_bhb_loop+0x35/0x90 [ 900.253845][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.259750][T12338] RIP: 0033:0x7fba8837e819 [ 900.264175][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.283796][T12338] RSP: 002b:00007fba891c0fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 900.292403][T12338] RAX: ffffffffffffffda RBX: 00007fba88536160 RCX: 00007fba8837e819 [ 900.300385][T12338] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 000000000000010d [ 900.308372][T12338] RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000000000000 [ 900.316443][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.324425][T12338] R13: 0000000000000000 R14: 000000000000010d R15: 0000000000000000 [ 900.332423][T12338] [ 900.952961][T12349] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 901.766621][ T3473] hfsplus: b-tree write err: -5, ino 4 [ 902.759743][T12368] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1301'. [ 902.870702][T12370] loop5: detected capacity change from 0 to 2048 [ 903.061884][T12370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.074498][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 903.115081][T12370] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.323899][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 903.975850][ T6149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.076516][ T5881] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.085467][ T5881] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.106259][ T5881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.148474][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 904.167511][T12397] FAULT_INJECTION: forcing a failure. [ 904.167511][T12397] name failslab, interval 1, probability 0, space 0, times 0 [ 904.177926][ T5881] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 904.198512][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.5.1306 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 904.208459][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 904.218616][T12397] Call Trace: [ 904.221905][T12397] [ 904.224830][T12397] dump_stack_lvl+0x241/0x360 [ 904.229550][T12397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.234747][T12397] ? __pfx__printk+0x10/0x10 [ 904.239336][T12397] ? fs_reclaim_acquire+0x93/0x130 [ 904.244442][T12397] ? __pfx___might_resched+0x10/0x10 [ 904.249773][T12397] should_fail_ex+0x3b0/0x4e0 [ 904.254468][T12397] should_failslab+0xac/0x100 [ 904.259143][T12397] __kmalloc_noprof+0xdd/0x4c0 [ 904.263907][T12397] ? kstrtouint_from_user+0x128/0x190 [ 904.269282][T12397] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 904.275012][T12397] tomoyo_realpath_from_path+0xcf/0x5e0 [ 904.280564][T12397] tomoyo_path_number_perm+0x236/0x860 [ 904.286020][T12397] ? __lock_acquire+0x1397/0x2100 [ 904.291065][T12397] ? tomoyo_path_number_perm+0x206/0x860 [ 904.296703][T12397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 904.302710][T12397] ? __fget_files+0x2a/0x410 [ 904.307313][T12397] ? __fget_files+0x2a/0x410 [ 904.311918][T12397] security_file_ioctl+0xc6/0x2a0 [ 904.316946][T12397] __se_sys_ioctl+0x46/0x170 [ 904.321565][T12397] do_syscall_64+0xf3/0x230 [ 904.326071][T12397] ? clear_bhb_loop+0x35/0x90 [ 904.330749][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.336643][T12397] RIP: 0033:0x7fce9997e819 [ 904.341058][T12397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.360659][T12397] RSP: 002b:00007fce9a6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.369072][T12397] RAX: ffffffffffffffda RBX: 00007fce99b35fa0 RCX: 00007fce9997e819 [ 904.377036][T12397] RDX: 0000000020000740 RSI: 00000000c100565c RDI: 0000000000000003 [ 904.385003][T12397] RBP: 00007fce9a6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 904.392967][T12397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.400929][T12397] R13: 0000000000000000 R14: 00007fce99b35fa0 R15: 00007ffef7dc82f8 [ 904.408917][T12397] [ 904.423845][T12397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 904.566898][ T5881] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.587168][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.603063][ T5881] usb 7-1: Product: syz [ 904.607587][ T5881] usb 7-1: Manufacturer: syz [ 904.674750][T12406] FAULT_INJECTION: forcing a failure. [ 904.674750][T12406] name failslab, interval 1, probability 0, space 0, times 0 [ 904.674795][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 904.693368][ T5881] cdc_wdm 7-1:1.0: skipping garbage [ 904.702547][ T5881] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 904.708611][ T5881] cdc_wdm 7-1:1.0: Unknown control protocol [ 904.729689][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.5.1308 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 904.739644][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 904.749736][T12406] Call Trace: [ 904.753035][T12406] [ 904.756050][T12406] dump_stack_lvl+0x241/0x360 [ 904.760759][T12406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 904.765985][T12406] ? __pfx__printk+0x10/0x10 [ 904.770598][T12406] ? fs_reclaim_acquire+0x93/0x130 [ 904.775728][T12406] ? __pfx___might_resched+0x10/0x10 [ 904.781042][T12406] should_fail_ex+0x3b0/0x4e0 [ 904.785750][T12406] should_failslab+0xac/0x100 [ 904.790449][T12406] __kmalloc_noprof+0xdd/0x4c0 [ 904.795217][T12406] ? kstrtouint_from_user+0x128/0x190 [ 904.800584][T12406] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 904.806303][T12406] tomoyo_realpath_from_path+0xcf/0x5e0 [ 904.811851][T12406] tomoyo_path_number_perm+0x236/0x860 [ 904.817313][T12406] ? __lock_acquire+0x1397/0x2100 [ 904.822371][T12406] ? tomoyo_path_number_perm+0x206/0x860 [ 904.828004][T12406] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 904.834007][T12406] ? __fget_files+0x2a/0x410 [ 904.838599][T12406] ? __fget_files+0x2a/0x410 [ 904.843191][T12406] security_file_ioctl+0xc6/0x2a0 [ 904.848217][T12406] __se_sys_ioctl+0x46/0x170 [ 904.852813][T12406] do_syscall_64+0xf3/0x230 [ 904.857323][T12406] ? clear_bhb_loop+0x35/0x90 [ 904.861999][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.867886][T12406] RIP: 0033:0x7fce9997e819 [ 904.872293][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.891894][T12406] RSP: 002b:00007fce9a6a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.900307][T12406] RAX: ffffffffffffffda RBX: 00007fce99b35fa0 RCX: 00007fce9997e819 [ 904.908274][T12406] RDX: 0000000020000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 904.916241][T12406] RBP: 00007fce9a6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 904.924212][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.932176][T12406] R13: 0000000000000000 R14: 00007fce99b35fa0 R15: 00007ffef7dc82f8 [ 904.940590][T12406] [ 904.947270][T12406] ERROR: Out of memory at tomoyo_realpath_from_path. [ 905.104039][T12385] loop7: detected capacity change from 0 to 32768 [ 905.128552][T12385] XFS: ikeep mount option is deprecated. [ 905.202125][ T5882] usb 7-1: USB disconnect, device number 2 [ 905.369446][T12385] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 905.395463][T11198] Bluetooth: hci0: command 0x1003 tx timeout [ 905.407797][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 905.585158][T12418] loop5: detected capacity change from 0 to 40427 [ 905.618425][T12418] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 905.626216][T12418] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 905.666031][T12418] F2FS-fs (loop5): invalid crc value [ 905.714721][T12418] F2FS-fs (loop5): Found nat_bits in checkpoint [ 905.728498][T12437] loop2: detected capacity change from 0 to 256 [ 905.767705][T12418] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 905.775231][T12418] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 905.840753][T12385] XFS (loop7): Ending clean mount [ 905.860431][T12385] XFS (loop7): Quotacheck needed: Please wait. [ 906.018763][T12385] XFS (loop7): Quotacheck: Done. [ 906.108587][T12385] XFS (loop7): Internal error !xfs_ifork_has_extents(ifp) at line 3992 of file fs/xfs/libxfs/xfs_bmap.c. Caller xfs_bmapi_read+0xc0a/0xdc0 [ 906.309064][T12385] CPU: 0 UID: 0 PID: 12385 Comm: syz.7.1305 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 906.319024][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 906.329114][T12385] Call Trace: [ 906.332415][T12385] [ 906.335365][T12385] dump_stack_lvl+0x241/0x360 [ 906.340076][T12385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.345297][T12385] xfs_corruption_error+0x11d/0x170 [ 906.350595][T12385] ? xfs_bmapi_read+0xc0a/0xdc0 [ 906.355451][T12385] xfs_bmapi_read+0xc3f/0xdc0 [ 906.360130][T12385] ? xfs_bmapi_read+0xc0a/0xdc0 [ 906.365006][T12385] ? down_read_nested+0x82f/0xa50 [ 906.370054][T12385] ? __pfx_xfs_bmapi_read+0x10/0x10 [ 906.375276][T12385] ? validate_chain+0x11e/0x5920 [ 906.380234][T12385] ? __pfx_down_read_nested+0x10/0x10 [ 906.385617][T12385] ? lockdep_unlock+0x16a/0x300 [ 906.390501][T12385] ? xfs_read_iomap_begin+0x316/0x8a0 [ 906.395877][T12385] ? xfs_read_iomap_begin+0x316/0x8a0 [ 906.401308][T12385] ? xfs_ilock+0x23e/0x3d0 [ 906.405741][T12385] xfs_read_iomap_begin+0x33c/0x8a0 [ 906.410950][T12385] ? __pfx_xfs_read_iomap_begin+0x10/0x10 [ 906.416689][T12385] iomap_iter+0x697/0xf80 [ 906.421029][T12385] ? __pfx_xfs_read_iomap_begin+0x10/0x10 [ 906.426755][T12385] iomap_fiemap+0x1d0/0x9b0 [ 906.431294][T12385] ? down_read_nested+0x82f/0xa50 [ 906.436318][T12385] ? __pfx_iomap_fiemap+0x10/0x10 [ 906.441352][T12385] ? __pfx_lock_release+0x10/0x10 [ 906.446373][T12385] ? stack_depot_save_flags+0x29/0x830 [ 906.451842][T12385] ? xfs_vn_fiemap+0x3f/0x110 [ 906.456540][T12385] ? xfs_ilock+0x205/0x3d0 [ 906.460978][T12385] xfs_vn_fiemap+0xb2/0x110 [ 906.465503][T12385] ? __pfx_xfs_vn_fiemap+0x10/0x10 [ 906.470644][T12385] do_vfs_ioctl+0x1c01/0x2e40 [ 906.475336][T12385] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 906.480379][T12385] ? mark_lock+0x9a/0x360 [ 906.484754][T12385] ? tomoyo_path_number_perm+0x206/0x860 [ 906.490398][T12385] ? __pfx_lock_release+0x10/0x10 [ 906.495424][T12385] ? tomoyo_path_number_perm+0x679/0x860 [ 906.501068][T12385] ? tomoyo_path_number_perm+0x679/0x860 [ 906.506713][T12385] ? tomoyo_path_number_perm+0x6f9/0x860 [ 906.512345][T12385] ? __lock_acquire+0x1397/0x2100 [ 906.517373][T12385] ? tomoyo_path_number_perm+0x206/0x860 [ 906.523092][T12385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 906.529101][T12385] ? __fget_files+0x2a/0x410 [ 906.533699][T12385] ? __fget_files+0x2a/0x410 [ 906.538296][T12385] __se_sys_ioctl+0x80/0x170 [ 906.542894][T12385] do_syscall_64+0xf3/0x230 [ 906.547395][T12385] ? clear_bhb_loop+0x35/0x90 [ 906.552075][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.557974][T12385] RIP: 0033:0x7f874ab7e819 [ 906.562389][T12385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.582001][T12385] RSP: 002b:00007f874b9f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.590420][T12385] RAX: ffffffffffffffda RBX: 00007f874ad35fa0 RCX: 00007f874ab7e819 [ 906.598390][T12385] RDX: 0000000020000000 RSI: 00000000c020660b RDI: 0000000000000005 [ 906.606357][T12385] RBP: 00007f874abf175e R08: 0000000000000000 R09: 0000000000000000 [ 906.614323][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.622292][T12385] R13: 0000000000000000 R14: 00007f874ad35fa0 R15: 00007fff84a27788 [ 906.630277][T12385] [ 906.633359][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.714536][T11412] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 906.771788][ T3473] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 906.881751][ T3473] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 906.940194][T12385] XFS (loop7): Corruption detected. Unmount and run xfs_repair [ 906.959398][T11412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.970969][T11412] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.981007][T11412] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 906.996719][T11412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.006126][T12456] loop6: detected capacity change from 0 to 8 [ 907.013042][T12456] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 907.029681][T12456] cramfs: Error -5 while decompressing! [ 907.035268][T12456] cramfs: ffffffff9a4cc3a8(8)->ffff888051727000(4096) [ 907.042176][T12456] cramfs: Error -3 while decompressing! [ 907.047863][T12456] cramfs: ffffffff9a4cc3b0(44)->ffff8880bff91000(4096) [ 907.054759][T12456] cramfs: Error -3 while decompressing! [ 907.060394][T12456] cramfs: ffffffff9a4cc3dc(16)->ffff8880bff93000(4096) [ 907.067739][T12456] cramfs: Error -5 while decompressing! [ 907.073312][T12456] cramfs: ffffffff9a4cc3a8(8)->ffff888051727000(4096) [ 907.080828][ T29] audit: type=1800 audit(1732526851.394:96): pid=12456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1314" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 907.121935][T11412] usb 5-1: config 0 descriptor?? [ 907.257180][T11575] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 907.706194][T11412] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 907.722207][T12471] loop7: detected capacity change from 0 to 47 [ 907.762864][T12471] MINIX-fs: deleted inode referenced: 9 [ 907.792466][T12471] MINIX-fs: deleted inode referenced: 9 [ 907.977550][ T5882] usb 5-1: USB disconnect, device number 3 [ 908.209907][T12481] loop6: detected capacity change from 0 to 24 [ 908.227785][ T5881] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 908.244806][T12482] loop7: detected capacity change from 0 to 128 [ 908.268856][T12482] vfat: Unknown parameter '000000000000000000000000xffffffffffffffff' [ 908.384747][T12484] loop6: detected capacity change from 0 to 512 [ 908.387541][T12486] FAULT_INJECTION: forcing a failure. [ 908.387541][T12486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.405161][T12486] CPU: 1 UID: 0 PID: 12486 Comm: syz.2.1322 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 908.415099][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 908.425164][T12486] Call Trace: [ 908.428447][T12486] [ 908.431382][T12486] dump_stack_lvl+0x241/0x360 [ 908.436064][T12486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.441305][T12486] ? __pfx__printk+0x10/0x10 [ 908.445898][T12486] should_fail_ex+0x3b0/0x4e0 [ 908.450579][T12486] _copy_from_user+0x2f/0xc0 [ 908.455184][T12486] __se_sys_memfd_create+0x2a1/0x840 [ 908.460599][T12486] do_syscall_64+0xf3/0x230 [ 908.465102][T12486] ? clear_bhb_loop+0x35/0x90 [ 908.469778][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.475668][T12486] RIP: 0033:0x7f18a257e819 [ 908.480082][T12486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.499686][T12486] RSP: 002b:00007f18a334de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 908.508120][T12486] RAX: ffffffffffffffda RBX: 00000000000124ab RCX: 00007f18a257e819 [ 908.516093][T12486] RDX: 00007f18a334def0 RSI: 0000000000000000 RDI: 00007f18a25f1fca [ 908.524155][T12486] RBP: 0000000020012580 R08: 00007f18a334dbb7 R09: 00007f18a334de40 [ 908.532127][T12486] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020012500 [ 908.540098][T12486] R13: 00007f18a334def0 R14: 00007f18a334deb0 R15: 0000000020012540 [ 908.548077][T12486] [ 908.561683][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 908.570464][ T5881] usb 6-1: not running at top speed; connect to a high speed hub [ 908.580325][ T5881] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 908.589611][ T5881] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 908.601787][ T5881] usb 6-1: config 1 has no interface number 1 [ 908.615159][ T5881] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.624616][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.637672][ T5881] usb 6-1: Product: syz [ 908.641887][ T5881] usb 6-1: Manufacturer: syz [ 908.655013][ T5881] usb 6-1: SerialNumber: syz [ 908.792204][T12492] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1325'. [ 908.833225][T12490] loop2: detected capacity change from 0 to 4096 [ 908.850442][T12490] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 908.906322][T12490] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 908.931742][T12490] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 908.998158][T11412] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 909.035932][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'. [ 909.240258][T12497] loop7: detected capacity change from 0 to 4096 [ 909.469399][T11412] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 909.478844][T11412] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.489607][T11412] usb 7-1: config 0 descriptor?? [ 910.094407][T12506] process 'syz.4.1329' launched './file2' with NULL argv: empty string added [ 910.126068][T12505] loop2: detected capacity change from 0 to 512 [ 910.354591][T11412] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 910.399342][T12505] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 910.406128][T11412] [drm] Initialized udl on minor 2 [ 910.415527][T12513] program syz.7.1330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 910.478077][T11412] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 910.536149][T11412] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 910.556594][T12505] EXT4-fs (loop2): orphan cleanup on readonly fs [ 910.574554][T12513] loop7: detected capacity change from 0 to 1024 [ 910.614776][ T908] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 910.646893][T11412] usb 7-1: USB disconnect, device number 3 [ 910.690783][T12505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1328: bg 0: block 18: invalid block bitmap [ 910.726411][ T908] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 910.799238][T12519] loop4: detected capacity change from 0 to 2048 [ 910.802278][T12505] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 910.850856][T12505] EXT4-fs (loop2): 1 truncate cleaned up [ 910.883204][T12505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 910.896049][T12526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 910.993389][ T29] audit: type=1800 audit(1732526855.294:97): pid=12519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1331" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 911.145833][T12499] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.152839][T12499] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 911.162543][T12499] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 911.168755][T12499] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 911.491475][ T5881] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 911.517535][ T5881] usb 6-1: 2:1 : sample bitwidth 252 in over sample bytes 4 [ 911.560770][ T5881] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 911.754050][T12550] loop4: detected capacity change from 0 to 8 [ 911.761152][T12550] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 911.771175][T12550] cramfs: Error -5 while decompressing! [ 911.777147][T12550] cramfs: ffffffff9a4d03a8(8)->ffff888051469000(4096) [ 911.785188][T12550] cramfs: Error -3 while decompressing! [ 911.790879][T12550] cramfs: ffffffff9a4d03b0(44)->ffff88805146a000(4096) [ 911.797804][T12550] cramfs: Error -3 while decompressing! [ 911.803366][T12550] cramfs: ffffffff9a4d03dc(16)->ffff88805146b000(4096) [ 911.811389][T12550] cramfs: Error -5 while decompressing! [ 911.816961][T12550] cramfs: ffffffff9a4d03a8(8)->ffff888051469000(4096) [ 911.824097][ T29] audit: type=1800 audit(1732526856.134:98): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1334" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 911.905381][ T5881] usb 6-1: USB disconnect, device number 4 [ 912.004892][T12499] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 912.028731][T12499] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 912.153073][T12499] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 912.173881][T12499] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 912.203196][T12514] udevd[12514]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.356509][T12560] FAULT_INJECTION: forcing a failure. [ 912.356509][T12560] name failslab, interval 1, probability 0, space 0, times 0 [ 912.395941][T12499] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 912.402081][T12499] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 912.427869][T12560] CPU: 0 UID: 0 PID: 12560 Comm: syz.7.1338 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 912.437819][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 912.447915][T12560] Call Trace: [ 912.451215][T12560] [ 912.454164][T12560] dump_stack_lvl+0x241/0x360 [ 912.458848][T12560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 912.464047][T12560] ? __pfx__printk+0x10/0x10 [ 912.468754][T12560] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 912.474802][T12560] ? __pfx___might_resched+0x10/0x10 [ 912.480100][T12560] should_fail_ex+0x3b0/0x4e0 [ 912.484782][T12560] should_failslab+0xac/0x100 [ 912.489459][T12560] kmem_cache_alloc_node_noprof+0x77/0x380 [ 912.495385][T12560] ? __alloc_skb+0x1c3/0x440 [ 912.499994][T12560] __alloc_skb+0x1c3/0x440 [ 912.504421][T12560] ? __pfx___alloc_skb+0x10/0x10 [ 912.509384][T12560] ? netlink_autobind+0xd6/0x2f0 [ 912.514332][T12560] ? netlink_autobind+0x2b0/0x2f0 [ 912.519357][T12560] netlink_sendmsg+0x638/0xcb0 [ 912.524139][T12560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.529433][T12560] ? aa_sock_msg_perm+0x91/0x160 [ 912.534377][T12560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.539660][T12560] __sock_sendmsg+0x221/0x270 [ 912.544342][T12560] ____sys_sendmsg+0x52a/0x7e0 [ 912.549104][T12560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.554380][T12560] ? __fget_files+0x2a/0x410 [ 912.558972][T12560] ? __fget_files+0x2a/0x410 [ 912.563562][T12560] __sys_sendmsg+0x269/0x350 [ 912.568144][T12560] ? __pfx_lock_release+0x10/0x10 [ 912.573169][T12560] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.578280][T12560] ? __pfx_vfs_write+0x10/0x10 [ 912.583054][T12560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 912.589376][T12560] ? do_syscall_64+0x100/0x230 [ 912.594138][T12560] ? do_syscall_64+0xb6/0x230 [ 912.598832][T12560] do_syscall_64+0xf3/0x230 [ 912.603344][T12560] ? clear_bhb_loop+0x35/0x90 [ 912.608023][T12560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.613940][T12560] RIP: 0033:0x7f874ab7e819 [ 912.618374][T12560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.638079][T12560] RSP: 002b:00007f874b9f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.646498][T12560] RAX: ffffffffffffffda RBX: 00007f874ad35fa0 RCX: 00007f874ab7e819 [ 912.654467][T12560] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 912.662450][T12560] RBP: 00007f874b9f2090 R08: 0000000000000000 R09: 0000000000000000 [ 912.670424][T12560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.678495][T12560] R13: 0000000000000000 R14: 00007f874ad35fa0 R15: 00007fff84a27788 [ 912.686478][T12560] [ 913.034646][T12574] loop4: detected capacity change from 0 to 64 [ 913.059553][T12574] minix: Unknown parameter 'êê$C†cw:;÷×+ýbÂ' [ 913.062737][T12566] syz.5.1336 (12566): drop_caches: 2 [ 913.247443][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.271790][T12566] syz.5.1336 (12566): drop_caches: 2 [ 913.360480][T12580] serio: Serial port pts0 [ 913.535246][T12588] loop6: detected capacity change from 0 to 1024 [ 913.622490][T12592] FAULT_INJECTION: forcing a failure. [ 913.622490][T12592] name failslab, interval 1, probability 0, space 0, times 0 [ 913.635284][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.5.1346 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 913.645218][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 913.655298][T12592] Call Trace: [ 913.658602][T12592] [ 913.661559][T12592] dump_stack_lvl+0x241/0x360 [ 913.666266][T12592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 913.671494][T12592] ? __pfx__printk+0x10/0x10 [ 913.676115][T12592] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 913.682123][T12592] ? __pfx___might_resched+0x10/0x10 [ 913.687441][T12592] should_fail_ex+0x3b0/0x4e0 [ 913.692206][T12592] should_failslab+0xac/0x100 [ 913.696916][T12592] kmem_cache_alloc_node_noprof+0x77/0x380 [ 913.702750][T12592] ? __alloc_skb+0x1c3/0x440 [ 913.707370][T12592] __alloc_skb+0x1c3/0x440 [ 913.711809][T12592] ? __pfx___alloc_skb+0x10/0x10 [ 913.716758][T12592] ? netlink_autobind+0xd6/0x2f0 [ 913.721700][T12592] ? netlink_autobind+0x2b0/0x2f0 [ 913.726723][T12592] netlink_sendmsg+0x638/0xcb0 [ 913.731494][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.736780][T12592] ? aa_sock_msg_perm+0x91/0x160 [ 913.741725][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.747007][T12592] __sock_sendmsg+0x221/0x270 [ 913.751722][T12592] ____sys_sendmsg+0x52a/0x7e0 [ 913.756512][T12592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.761802][T12592] ? __fget_files+0x2a/0x410 [ 913.766396][T12592] ? __fget_files+0x2a/0x410 [ 913.770995][T12592] __sys_sendmsg+0x269/0x350 [ 913.775587][T12592] ? __pfx_lock_release+0x10/0x10 [ 913.780613][T12592] ? __pfx___sys_sendmsg+0x10/0x10 [ 913.785729][T12592] ? __pfx_vfs_write+0x10/0x10 [ 913.790509][T12592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 913.797013][T12592] ? do_syscall_64+0x100/0x230 [ 913.801785][T12592] ? do_syscall_64+0xb6/0x230 [ 913.806463][T12592] do_syscall_64+0xf3/0x230 [ 913.810965][T12592] ? clear_bhb_loop+0x35/0x90 [ 913.815643][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.821536][T12592] RIP: 0033:0x7fce9997e819 [ 913.825948][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.845550][T12592] RSP: 002b:00007fce9a6a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.853963][T12592] RAX: ffffffffffffffda RBX: 00007fce99b35fa0 RCX: 00007fce9997e819 [ 913.861931][T12592] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 913.869898][T12592] RBP: 00007fce9a6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 913.877864][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.885827][T12592] R13: 0000000000000000 R14: 00007fce99b35fa0 R15: 00007ffef7dc82f8 [ 913.894063][T12592] [ 914.102743][ T3545] hfsplus: b-tree write err: -5, ino 4 [ 914.255402][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'. [ 914.359908][T12621] loop2: detected capacity change from 0 to 764 [ 914.453165][T12621] rock: directory entry would overflow storage [ 914.476970][T12621] rock: sig=0x4654, size=5, remaining=4 [ 914.590027][ T5881] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 914.757718][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 914.772708][ T5881] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 914.777147][T12631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.784129][ T5881] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.844199][ T5881] usb 7-1: config 0 interface 0 has no altsetting 0 [ 914.870478][ T5881] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 914.887750][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.916888][ T5881] usb 7-1: config 0 descriptor?? [ 914.947189][T12631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.963424][T12609] loop5: detected capacity change from 0 to 32768 [ 915.072558][T12609] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 915.175840][T12609] XFS (loop5): Ending clean mount [ 915.213415][T12609] XFS (loop5): Quotacheck needed: Please wait. [ 915.344905][T12609] XFS (loop5): Quotacheck: Done. [ 915.475747][T12645] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 915.545141][T12645] loop7: detected capacity change from 0 to 1024 [ 916.244886][ T6149] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 916.585748][T12648] sg_write: process 1087 (syz.4.1357) changed security contexts after opening file descriptor, this is not allowed. [ 916.598663][T12650] loop2: detected capacity change from 0 to 32768 [ 916.664261][T12650] JBD2: Ignoring recovery information on journal [ 916.683504][T12652] loop7: detected capacity change from 0 to 4096 [ 916.688413][ C1] sd 0:0:1:0: [sda] tag#4822 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 916.700310][ C1] sd 0:0:1:0: [sda] tag#4822 CDB: Write(6) 0a 00 00 00 00 00 00 00 fc 00 00 00 [ 916.772802][T12650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 916.844803][T12652] Cannot load nls cp85“å«KLªÊ [ 917.103377][T12659] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 917.155014][T12659] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 917.582288][T12660] Falling back ldisc for ttyS3. [ 917.828051][T12666] FAULT_INJECTION: forcing a failure. [ 917.828051][T12666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.857939][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.5.1359 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 917.867884][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 917.877962][T12666] Call Trace: [ 917.881258][T12666] [ 917.884207][T12666] dump_stack_lvl+0x241/0x360 [ 917.888920][T12666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.894147][T12666] ? __pfx__printk+0x10/0x10 [ 917.898762][T12666] ? __pfx_lock_release+0x10/0x10 [ 917.903803][T12666] ? __lock_acquire+0x1397/0x2100 [ 917.908828][T12666] should_fail_ex+0x3b0/0x4e0 [ 917.913533][T12666] _copy_from_user+0x2f/0xc0 [ 917.918126][T12666] kstrtouint_from_user+0xc6/0x190 [ 917.923246][T12666] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 917.928989][T12666] ? __pfx_lock_acquire+0x10/0x10 [ 917.934017][T12666] proc_fail_nth_write+0xaa/0x2d0 [ 917.939066][T12666] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 917.944957][T12666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 917.950588][T12666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 917.956219][T12666] vfs_write+0x2a3/0xd30 [ 917.960465][T12666] ? __pfx_vfs_write+0x10/0x10 [ 917.965225][T12666] ? __fget_files+0x2a/0x410 [ 917.969820][T12666] ? __fget_files+0x395/0x410 [ 917.974494][T12666] ? __fget_files+0x2a/0x410 [ 917.979087][T12666] ksys_write+0x18f/0x2b0 [ 917.983421][T12666] ? __pfx_ksys_write+0x10/0x10 [ 917.988271][T12666] ? do_syscall_64+0x100/0x230 [ 917.993034][T12666] ? do_syscall_64+0xb6/0x230 [ 917.997710][T12666] do_syscall_64+0xf3/0x230 [ 918.002209][T12666] ? clear_bhb_loop+0x35/0x90 [ 918.006891][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.012781][T12666] RIP: 0033:0x7fce9997d2ff [ 918.017194][T12666] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 918.036795][T12666] RSP: 002b:00007fce9a6a3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 918.045219][T12666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce9997d2ff [ 918.053191][T12666] RDX: 0000000000000001 RSI: 00007fce9a6a30a0 RDI: 0000000000000004 [ 918.061156][T12666] RBP: 00007fce9a6a3090 R08: 0000000000000000 R09: 0000000000000000 [ 918.069143][T12666] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 918.077107][T12666] R13: 0000000000000000 R14: 00007fce99b35fa0 R15: 00007ffef7dc82f8 [ 918.085089][T12666] [ 918.098068][T12662] loop7: detected capacity change from 0 to 8192 [ 918.118270][ T5839] ocfs2: Unmounting device (7,2) on (node local) [ 918.125214][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 918.131621][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 918.217801][ T5881] usb 7-1: USB disconnect, device number 4 [ 918.252196][T12673] loop6: detected capacity change from 0 to 64 [ 918.357819][T12673] hfs: get root inode failed [ 918.382135][T12673] IPv6: addrconf: prefix option has invalid lifetime [ 918.756098][T12678] loop5: detected capacity change from 0 to 512 [ 918.806317][T12678] EXT4-fs (loop5): Test dummy encryption mode enabled [ 918.863095][T12678] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #12: comm syz.5.1366: corrupted in-inode xattr: invalid ea_ino [ 918.876719][ T5881] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 918.907535][T12678] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.1366: couldn't read orphan inode 12 (err -117) [ 918.984403][T12678] EXT4-fs (loop5): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.237726][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 919.296394][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 919.309649][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 919.331434][T12686] loop2: detected capacity change from 0 to 1024 [ 920.123776][ T5881] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 920.141378][T12688] fscrypt (loop5): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 920.147935][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.304229][ T5881] usb 7-1: Product: syz [ 920.337958][ T5881] usb 7-1: Manufacturer: syz [ 920.342883][ T5881] usb 7-1: SerialNumber: syz [ 920.397240][ T5881] usb 7-1: config 0 descriptor?? [ 920.406219][ T6149] EXT4-fs (loop5): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 920.661917][T12701] loop2: detected capacity change from 0 to 512 [ 920.717866][T12702] syz.4.1363 (12702): drop_caches: 2 [ 920.731240][T12702] syz.4.1363 (12702): drop_caches: 2 [ 920.739741][T12701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.753685][T12701] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.778502][T12701] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:335: inode #15: comm syz.2.1370: verity file corrupted; can't find descriptor [ 920.814029][T12701] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 920.935427][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.211109][T12673] loop6: detected capacity change from 0 to 32768 [ 921.630345][T12673] loop6: detected capacity change from 0 to 32768 [ 921.688134][T11412] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 921.696811][T12673] jbd2_journal_init_inode: Cannot locate journal superblock [ 921.704926][T12673] (syz.6.1365,12673,1):ocfs2_journal_init:951 ERROR: Linux journal layer error [ 921.714575][T12673] (syz.6.1365,12673,1):ocfs2_check_volume:2399 ERROR: Could not initialize journal! [ 921.724099][T12673] (syz.6.1365,12673,1):ocfs2_check_volume:2484 ERROR: status = -22 [ 921.732091][T12673] (syz.6.1365,12673,1):ocfs2_mount_volume:1819 ERROR: status = -22 [ 921.759372][T12673] (syz.6.1365,12673,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 921.858122][T11412] usb 6-1: Using ep0 maxpacket: 16 [ 921.869009][T11412] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 921.897842][T11412] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 921.919547][T11412] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 921.929090][T11412] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.937124][T11412] usb 6-1: Product: syz [ 921.942326][T11412] usb 6-1: Manufacturer: syz [ 921.946965][T11412] usb 6-1: SerialNumber: syz [ 921.954436][T11412] usb 6-1: config 0 descriptor?? [ 921.964500][T11412] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 921.974360][T11412] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 921.986137][T12673] loop6: detected capacity change from 0 to 512 [ 922.016850][ T5881] usb_8dev 7-1:0.0 can0: sending command message failed [ 922.031878][ T5881] usb_8dev 7-1:0.0 can0: can't get firmware version [ 922.098131][ T5881] usb_8dev 7-1:0.0: probe with driver usb_8dev failed with error -22 [ 922.115116][ T5881] usb 7-1: USB disconnect, device number 5 [ 922.575488][T11412] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 922.589863][T11412] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 923.614958][T11412] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 923.622404][T11412] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 923.632827][T11412] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 923.639561][T11412] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 923.646114][T11412] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 923.653232][T11412] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 923.669980][T11412] usb 6-1: USB disconnect, device number 5 [ 931.772994][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.779478][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 973.089190][T12729] syz.5.1372 (12729): drop_caches: 2 [ 973.095136][T12729] syz.5.1372 (12729): drop_caches: 2 [ 973.116666][T12728] loop6: detected capacity change from 0 to 128 [ 973.238172][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 974.398815][T12737] loop5: detected capacity change from 0 to 512 [ 974.438241][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1377'. [ 974.517182][T12742] FAULT_INJECTION: forcing a failure. [ 974.517182][T12742] name failslab, interval 1, probability 0, space 0, times 0 [ 974.542847][T12742] CPU: 0 UID: 0 PID: 12742 Comm: syz.6.1380 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 974.552820][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 974.562879][T12742] Call Trace: [ 974.566170][T12742] [ 974.569101][T12742] dump_stack_lvl+0x241/0x360 [ 974.573783][T12742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 974.578981][T12742] ? __pfx__printk+0x10/0x10 [ 974.583575][T12742] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 974.589468][T12742] ? __pfx___might_resched+0x10/0x10 [ 974.594756][T12742] should_fail_ex+0x3b0/0x4e0 [ 974.599435][T12742] should_failslab+0xac/0x100 [ 974.604115][T12742] ? shmem_alloc_inode+0x28/0x40 [ 974.609052][T12742] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 974.614765][T12742] ? __pfx_lock_release+0x10/0x10 [ 974.619788][T12742] shmem_alloc_inode+0x28/0x40 [ 974.624549][T12742] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 974.630004][T12742] alloc_inode+0x65/0x1a0 [ 974.634333][T12742] new_inode+0x22/0x1d0 [ 974.638488][T12742] shmem_get_inode+0x39d/0xf20 [ 974.643250][T12742] ? _raw_spin_unlock+0x28/0x50 [ 974.648095][T12742] ? alloc_fd+0x61a/0x690 [ 974.652428][T12742] __shmem_file_setup+0x171/0x2c0 [ 974.657447][T12742] __se_sys_memfd_create+0x36b/0x840 [ 974.662824][T12742] do_syscall_64+0xf3/0x230 [ 974.667323][T12742] ? clear_bhb_loop+0x35/0x90 [ 974.672000][T12742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.677891][T12742] RIP: 0033:0x7f062b17e819 [ 974.682302][T12742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.701911][T12742] RSP: 002b:00007f062bed6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 974.710413][T12742] RAX: ffffffffffffffda RBX: 0000000000000237 RCX: 00007f062b17e819 [ 974.718382][T12742] RDX: 00007f062bed6ef0 RSI: 0000000000000000 RDI: 00007f062b1f1fca [ 974.726348][T12742] RBP: 0000000020000300 R08: 00007f062bed6bb7 R09: 00007f062bed6e40 [ 974.734360][T12742] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000280 [ 974.742343][T12742] R13: 00007f062bed6ef0 R14: 00007f062bed6eb0 R15: 00000000200002c0 [ 974.750331][T12742] [ 974.807858][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 975.072466][T12739] loop7: detected capacity change from 0 to 32768 [ 975.095722][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.105974][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 975.128047][ T5881] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.160541][T12749] loop5: detected capacity change from 0 to 8 [ 975.196371][ T5881] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.213136][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.246858][T12739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1379 (12739) [ 975.256421][ T5881] usb 3-1: Product: syz [ 975.273802][ T5881] usb 3-1: Manufacturer: syz [ 975.282190][T12739] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 975.289611][ T5881] usb 3-1: SerialNumber: syz [ 975.297764][ T46] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 975.323391][ T5881] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 975.344124][ T5881] cdc_mbim 3-1:1.0: bind() failure [ 975.355599][T12739] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 975.374953][T12739] BTRFS error (device loop7): cannot disable free-space-tree [ 975.395146][T12739] BTRFS info (device loop7): disk space caching is enabled [ 975.417560][T12739] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 975.476057][ T46] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 975.489270][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.497818][T12739] BTRFS error (device loop7): open_ctree failed [ 975.508972][ T46] usb 7-1: Product: syz [ 975.518125][ T46] usb 7-1: Manufacturer: syz [ 975.522761][ T46] usb 7-1: SerialNumber: syz [ 975.548740][ T46] usb 7-1: config 0 descriptor?? [ 975.581726][T12757] loop4: detected capacity change from 0 to 1024 [ 975.647231][T12720] program syz.2.1374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 975.689846][ T5881] usb 3-1: USB disconnect, device number 4 [ 975.769041][ T46] usb 7-1: USB disconnect, device number 6 [ 977.124148][T12758] udevd[12758]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.918560][T12780] loop6: detected capacity change from 0 to 1024 [ 977.967987][T12754] loop5: detected capacity change from 0 to 32768 [ 978.075491][T12764] loop4: detected capacity change from 0 to 32768 [ 978.212134][T12764] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 978.221769][T12764] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 978.336181][T12764] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 978.346758][ T5881] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 978.356014][ T5881] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 978.385460][ T7214] hfsplus: b-tree write err: -5, ino 4 [ 978.575881][ T5881] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 219ms [ 978.592425][ T5881] gfs2: fsid=syz:syz.0: jid=0: Done [ 978.616604][T12764] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 978.792600][T12799] FAULT_INJECTION: forcing a failure. [ 978.792600][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 978.842924][T12802] loop7: detected capacity change from 0 to 47 [ 978.855582][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.6.1400 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 978.865555][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 978.875632][T12799] Call Trace: [ 978.878933][T12799] [ 978.881879][T12799] dump_stack_lvl+0x241/0x360 [ 978.886584][T12799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.891807][T12799] ? __pfx__printk+0x10/0x10 [ 978.896424][T12799] ? kmem_cache_alloc_noprof+0x48/0x380 [ 978.901995][T12799] ? __pfx___might_resched+0x10/0x10 [ 978.907309][T12799] should_fail_ex+0x3b0/0x4e0 [ 978.912018][T12799] should_failslab+0xac/0x100 [ 978.916721][T12799] ? alloc_empty_file+0x9e/0x1d0 [ 978.921686][T12799] kmem_cache_alloc_noprof+0x70/0x380 [ 978.927083][T12799] alloc_empty_file+0x9e/0x1d0 [ 978.931875][T12799] path_openat+0x107/0x3590 [ 978.936402][T12799] ? mark_lock+0x9a/0x360 [ 978.940752][T12799] ? __pfx_stack_trace_save+0x10/0x10 [ 978.946157][T12799] ? __lock_acquire+0x1397/0x2100 [ 978.951204][T12799] ? __pfx_path_openat+0x10/0x10 [ 978.956178][T12799] do_filp_open+0x27f/0x4e0 [ 978.960707][T12799] ? __pfx_do_filp_open+0x10/0x10 [ 978.965746][T12799] ? do_raw_spin_lock+0x14f/0x370 [ 978.970825][T12799] do_sys_openat2+0x13e/0x1d0 [ 978.975532][T12799] ? __pfx_do_sys_openat2+0x10/0x10 [ 978.980772][T12799] __x64_sys_openat+0x247/0x2a0 [ 978.985650][T12799] ? __pfx___x64_sys_openat+0x10/0x10 [ 978.991061][T12799] ? exc_page_fault+0x590/0x8c0 [ 978.995939][T12799] ? do_syscall_64+0xb6/0x230 [ 979.000640][T12799] do_syscall_64+0xf3/0x230 [ 979.005150][T12799] ? clear_bhb_loop+0x35/0x90 [ 979.009833][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.015724][T12799] RIP: 0033:0x7f062b17d1b0 [ 979.020138][T12799] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 979.039742][T12799] RSP: 002b:00007f062bed6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 979.048157][T12799] RAX: ffffffffffffffda RBX: 0000000000008002 RCX: 00007f062b17d1b0 [ 979.056122][T12799] RDX: 0000000000008002 RSI: 00007f062bed6c10 RDI: 00000000ffffff9c [ 979.064092][T12799] RBP: 00007f062bed6c10 R08: 0000000000000000 R09: 002367732f766564 [ 979.072060][T12799] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 979.080026][T12799] R13: 0000000000000001 R14: 00007f062b335fa0 R15: 00007fff96873368 [ 979.088007][T12799] [ 979.652255][T12805] MINIX-fs: deleted inode referenced: 9 [ 979.674851][T12805] MINIX-fs: deleted inode referenced: 9 [ 979.994131][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1404'. [ 980.094028][T12813] loop2: detected capacity change from 0 to 128 [ 980.117420][T12813] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 980.183765][T12813] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 980.245037][T12813] FAT-fs (loop2): Directory bread(block 4098) failed [ 980.260406][T12813] FAT-fs (loop2): Directory bread(block 4099) failed [ 980.267236][T12813] FAT-fs (loop2): Directory bread(block 4100) failed [ 980.274030][T12813] FAT-fs (loop2): Directory bread(block 4101) failed [ 980.281144][T12813] FAT-fs (loop2): Directory bread(block 4102) failed [ 980.289383][T12813] FAT-fs (loop2): Directory bread(block 4103) failed [ 980.296217][T12813] FAT-fs (loop2): Directory bread(block 4104) failed [ 980.303020][T12813] FAT-fs (loop2): Directory bread(block 4105) failed [ 980.317872][ T908] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 980.419910][T12801] loop5: detected capacity change from 0 to 32768 [ 980.457719][ T29] audit: type=1800 audit(1732526924.754:99): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1398" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 980.528023][ T908] usb 8-1: Using ep0 maxpacket: 32 [ 980.541675][ T908] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 980.573273][ T908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.585378][ T908] usb 8-1: Product: syz [ 980.593258][T12815] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.607147][ T908] usb 8-1: Manufacturer: syz [ 980.612925][ T908] usb 8-1: SerialNumber: syz [ 980.641353][ T908] usb 8-1: config 0 descriptor?? [ 980.663425][ T908] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 980.865856][T12815] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.048433][T12830] fuse: Bad value for 'fd' [ 981.071027][T12830] loop4: detected capacity change from 0 to 512 [ 981.253654][T12815] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.518331][ T908] gspca_stk1135: reg_w 0x0 err -110 [ 981.525256][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.566291][ T908] gspca_stk1135: Sensor write failed [ 981.743498][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.750057][ T908] gspca_stk1135: Sensor write failed [ 981.755471][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.761962][ T908] gspca_stk1135: Sensor read failed [ 981.767271][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.773777][ T908] gspca_stk1135: Sensor read failed [ 981.779145][ T908] gspca_stk1135: Detected sensor type unknown (0x0) [ 981.785856][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.792392][ T908] gspca_stk1135: Sensor read failed [ 981.797767][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.804188][ T908] gspca_stk1135: Sensor read failed [ 981.809585][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.816008][ T908] gspca_stk1135: Sensor write failed [ 981.821484][ T908] gspca_stk1135: serial bus timeout: status=0x00 [ 981.827948][ T908] gspca_stk1135: Sensor write failed [ 981.833394][ T908] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 981.993477][T12815] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.326696][T12815] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.405811][T12815] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.443023][T12815] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.512728][T12815] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.191112][T12845] loop6: detected capacity change from 0 to 47 [ 983.416887][ T5881] usb 8-1: USB disconnect, device number 3 [ 983.506923][T12834] loop2: detected capacity change from 0 to 32768 [ 983.507459][T12847] loop4: detected capacity change from 0 to 1024 [ 983.549026][T12848] MINIX-fs: deleted inode referenced: 9 [ 983.555371][T12848] MINIX-fs: deleted inode referenced: 9 [ 983.632958][T12834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1413 (12834) [ 983.730040][T12847] hfsplus: xattr searching failed [ 983.847843][T12847] hfsplus: b-tree write err: -5, ino 3 [ 983.867738][T12834] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 983.878322][T12834] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 983.887126][T12834] BTRFS info (device loop2): using free-space-tree [ 984.706725][T12847] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1416'. [ 984.940416][ T908] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 984.949123][T12834] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 984.949492][T12834] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 985.088935][T12877] overlayfs: failed to resolve './file0': -2 [ 985.696196][T12881] loop5: detected capacity change from 0 to 1024 [ 985.709874][T12834] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 985.710149][T12834] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 985.777066][T12834] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 985.822875][ T908] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 986.001810][ T908] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.054751][ T908] usb 8-1: config 0 has no interface number 0 [ 986.115415][ T908] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 986.126721][ T908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.135201][ T908] usb 8-1: Product: syz [ 986.139475][ T908] usb 8-1: Manufacturer: syz [ 986.144083][ T908] usb 8-1: SerialNumber: syz [ 986.157336][ T908] usb 8-1: config 0 descriptor?? [ 986.166827][T12834] BTRFS error (device loop2): open_ctree failed [ 986.266529][ T908] ims_pcu 8-1:0.41: Missing CDC union descriptor [ 986.273817][ T908] ims_pcu 8-1:0.41: probe with driver ims_pcu failed with error -22 [ 986.416392][T12888] loop6: detected capacity change from 0 to 32768 [ 986.515199][T12888] loop6: detected capacity change from 0 to 16 [ 986.529771][T12888] erofs (device loop6): extra devices don't match (ondisk 0, given 1) [ 986.879158][ T46] usb 8-1: USB disconnect, device number 4 [ 987.372348][T12903] loop4: detected capacity change from 0 to 47 [ 987.568142][ T975] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 988.590083][T12920] overlayfs: failed to resolve './file0': -2 [ 988.861209][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.872219][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.882281][ T975] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 988.891885][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.904539][ T975] usb 6-1: config 0 descriptor?? [ 989.344510][T12924] loop6: detected capacity change from 0 to 64 [ 989.380582][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.402536][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.420733][T12924] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 989.533598][ T975] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 989.540865][ T975] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 989.548024][ T975] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 989.555102][ T975] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 989.562249][ T975] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 989.684576][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 989.716403][T12928] xt_SECMARK: invalid mode: 0 [ 989.745662][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.895290][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.187803][ T908] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 990.247040][ T975] hid-led 0003:1D34:000A.0002: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 990.267213][ T975] hid-led 0003:1D34:000A.0002: Dream Cheeky Webmail Notifier initialized [ 990.491150][ T908] usb 8-1: Using ep0 maxpacket: 8 [ 990.497960][ T908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.508954][ T908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.518917][ T908] usb 8-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 990.528078][ T908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.585728][T12936] loop6: detected capacity change from 0 to 8 [ 990.592976][T12936] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 990.645529][T12901] loop5: detected capacity change from 0 to 128 [ 990.662478][ T5837] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 990.677413][ T908] usb 8-1: config 0 descriptor?? [ 991.231464][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.239609][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.247180][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.255744][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.297696][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.315391][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.327723][ T908] playstation 0003:054C:0CE6.0003: unknown main item tag 0x0 [ 991.382668][ T908] playstation 0003:054C:0CE6.0003: hidraw1: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.7-1/input0 [ 991.586742][T12941] loop6: detected capacity change from 0 to 2048 [ 991.653656][ T908] playstation 0003:054C:0CE6.0003: Failed to retrieve feature with reportID 9: -71 [ 991.668462][T12943] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 991.693882][ T908] playstation 0003:054C:0CE6.0003: Failed to retrieve DualSense pairing info: -71 [ 991.718035][ T908] playstation 0003:054C:0CE6.0003: Failed to get MAC address from DualSense [ 991.749346][ T908] playstation 0003:054C:0CE6.0003: Failed to create dualsense. [ 991.772690][ T908] playstation 0003:054C:0CE6.0003: probe with driver playstation failed with error -71 [ 991.787984][T12941] ================================================================== [ 991.796086][T12941] BUG: KASAN: slab-out-of-bounds in ovl_inode_upper+0x36/0x80 [ 991.803576][T12941] Read of size 8 at addr ffff888058d4b280 by task syz.6.1442/12941 [ 991.811481][T12941] [ 991.813821][T12941] CPU: 1 UID: 0 PID: 12941 Comm: syz.6.1442 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 991.823729][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 991.833801][T12941] Call Trace: [ 991.837093][T12941] [ 991.840036][T12941] dump_stack_lvl+0x241/0x360 [ 991.844742][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.849966][T12941] ? __pfx__printk+0x10/0x10 [ 991.854584][T12941] ? _printk+0xd5/0x120 [ 991.858768][T12941] ? __virt_addr_valid+0x183/0x530 [ 991.863903][T12941] ? __virt_addr_valid+0x183/0x530 [ 991.869041][T12941] print_report+0x169/0x550 [ 991.873563][T12941] ? __virt_addr_valid+0x183/0x530 [ 991.878695][T12941] ? __virt_addr_valid+0x183/0x530 [ 991.883823][T12941] ? __virt_addr_valid+0x45f/0x530 [ 991.889041][T12941] ? __phys_addr+0xba/0x170 [ 991.893561][T12941] ? ovl_inode_upper+0x36/0x80 [ 991.898352][T12941] kasan_report+0x143/0x180 [ 991.902873][T12941] ? ovl_inode_upper+0x36/0x80 [ 991.907659][T12941] ovl_inode_upper+0x36/0x80 [ 991.912269][T12941] ovl_file_accessed+0x7e/0x370 [ 991.917146][T12941] ? __pfx_ovl_file_accessed+0x10/0x10 [ 991.922626][T12941] backing_file_mmap+0x1f8/0x260 [ 991.927585][T12941] ovl_mmap+0x1c9/0x220 [ 991.931759][T12941] ? __pfx_ovl_mmap+0x10/0x10 [ 991.936454][T12941] ? __pfx_ovl_file_accessed+0x10/0x10 [ 991.941932][T12941] ? __mas_set_range+0x133/0x3c0 [ 991.946890][T12941] __mmap_region+0x2204/0x2cd0 [ 991.951683][T12941] ? __pfx___mmap_region+0x10/0x10 [ 991.956809][T12941] ? __schedule+0x1858/0x4c30 [ 991.961529][T12941] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 991.967792][T12941] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 991.974399][T12941] ? cap_mmap_addr+0x163/0x2c0 [ 991.979187][T12941] mmap_region+0x1d0/0x2c0 [ 991.983628][T12941] ? security_mmap_addr+0x6f/0x250 [ 991.988761][T12941] do_mmap+0x8f0/0x1000 [ 991.992920][T12941] ? __pfx_do_mmap+0x10/0x10 [ 991.997505][T12941] ? __pfx_down_write_killable+0x10/0x10 [ 992.003132][T12941] ? common_file_perm+0x1a6/0x210 [ 992.008156][T12941] vm_mmap_pgoff+0x214/0x430 [ 992.012740][T12941] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 992.017840][T12941] ? __fget_files+0x2a/0x410 [ 992.022423][T12941] ? __fget_files+0x395/0x410 [ 992.027091][T12941] ? __fget_files+0x2a/0x410 [ 992.031675][T12941] ksys_mmap_pgoff+0x4eb/0x720 [ 992.036432][T12941] ? __x64_sys_mmap+0x7f/0x140 [ 992.041189][T12941] do_syscall_64+0xf3/0x230 [ 992.045682][T12941] ? clear_bhb_loop+0x35/0x90 [ 992.050355][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.056240][T12941] RIP: 0033:0x7f062b17e819 [ 992.060647][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.080274][T12941] RSP: 002b:00007f062bed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 992.088698][T12941] RAX: ffffffffffffffda RBX: 00007f062b335fa0 RCX: 00007f062b17e819 [ 992.096670][T12941] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 992.104645][T12941] RBP: 00007f062b1f175e R08: 0000000000000006 R09: 0000000000000000 [ 992.112617][T12941] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 992.120580][T12941] R13: 0000000000000000 R14: 00007f062b335fa0 R15: 00007fff96873368 [ 992.128548][T12941] [ 992.131557][T12941] [ 992.133877][T12941] Allocated by task 12941: [ 992.138275][T12941] kasan_save_track+0x3f/0x80 [ 992.142946][T12941] __kasan_slab_alloc+0x66/0x80 [ 992.147870][T12941] kmem_cache_alloc_lru_noprof+0x1dd/0x390 [ 992.153665][T12941] nilfs_alloc_inode+0x2e/0x110 [ 992.158504][T12941] alloc_inode+0x65/0x1a0 [ 992.162825][T12941] iget5_locked+0x4a/0xa0 [ 992.167149][T12941] nilfs_iget+0x130/0x810 [ 992.171468][T12941] nilfs_lookup+0x198/0x210 [ 992.175965][T12941] __lookup_slow+0x28c/0x3f0 [ 992.180545][T12941] lookup_one_unlocked+0x1a4/0x290 [ 992.185642][T12941] ovl_lookup_single+0x200/0xbd0 [ 992.190571][T12941] ovl_lookup_layer+0x417/0x510 [ 992.195409][T12941] ovl_lookup+0xcf7/0x2a60 [ 992.199814][T12941] path_openat+0x11a7/0x3590 [ 992.204401][T12941] do_filp_open+0x27f/0x4e0 [ 992.208895][T12941] do_sys_openat2+0x13e/0x1d0 [ 992.213569][T12941] __x64_sys_creat+0x123/0x170 [ 992.218331][T12941] do_syscall_64+0xf3/0x230 [ 992.222843][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.228728][T12941] [ 992.231042][T12941] The buggy address belongs to the object at ffff888058d4aca0 [ 992.231042][T12941] which belongs to the cache nilfs2_inode_cache of size 1504 [ 992.245799][T12941] The buggy address is located 0 bytes to the right of [ 992.245799][T12941] allocated 1504-byte region [ffff888058d4aca0, ffff888058d4b280) [ 992.260369][T12941] [ 992.262683][T12941] The buggy address belongs to the physical page: [ 992.269087][T12941] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58d48 [ 992.277835][T12941] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 992.286318][T12941] memcg:ffff8880351fe301 [ 992.290565][T12941] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 992.298104][T12941] page_type: f5(slab) [ 992.302077][T12941] raw: 00fff00000000040 ffff88801dfd1b40 dead000000000122 0000000000000000 [ 992.310663][T12941] raw: 0000000000000000 0000000080140014 00000001f5000000 ffff8880351fe301 [ 992.319235][T12941] head: 00fff00000000040 ffff88801dfd1b40 dead000000000122 0000000000000000 [ 992.327894][T12941] head: 0000000000000000 0000000080140014 00000001f5000000 ffff8880351fe301 [ 992.336568][T12941] head: 00fff00000000003 ffffea0001635201 ffffffffffffffff 0000000000000000 [ 992.345244][T12941] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 992.353905][T12941] page dumped because: kasan: bad access detected [ 992.360322][T12941] page_owner tracks the page as allocated [ 992.366023][T12941] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 6746, tgid 6745 (syz.1.176), ts 134231887985, free_ts 97139458810 [ 992.388154][T12941] post_alloc_hook+0x1f3/0x230 [ 992.392917][T12941] get_page_from_freelist+0x3725/0x3870 [ 992.398464][T12941] __alloc_pages_noprof+0x292/0x710 [ 992.403670][T12941] alloc_pages_mpol_noprof+0x3e8/0x680 [ 992.409133][T12941] alloc_slab_page+0x6a/0x140 [ 992.413806][T12941] allocate_slab+0x5a/0x2f0 [ 992.418300][T12941] ___slab_alloc+0xcd1/0x14b0 [ 992.422971][T12941] __slab_alloc+0x58/0xa0 [ 992.427293][T12941] kmem_cache_alloc_lru_noprof+0x26c/0x390 [ 992.433094][T12941] nilfs_alloc_inode+0x2e/0x110 [ 992.437936][T12941] alloc_inode+0x65/0x1a0 [ 992.442262][T12941] iget5_locked+0x4a/0xa0 [ 992.446584][T12941] nilfs_iget_locked+0x113/0x160 [ 992.451510][T12941] nilfs_dat_read+0xc3/0x320 [ 992.456096][T12941] load_nilfs+0x579/0x1090 [ 992.460508][T12941] nilfs_fill_super+0x31e/0x720 [ 992.465354][T12941] page last free pid 5884 tgid 5884 stack trace: [ 992.471665][T12941] free_unref_page+0xdf9/0x1140 [ 992.476505][T12941] __slab_free+0x31b/0x3d0 [ 992.480915][T12941] qlist_free_all+0x9a/0x140 [ 992.485492][T12941] kasan_quarantine_reduce+0x14f/0x170 [ 992.490940][T12941] __kasan_slab_alloc+0x23/0x80 [ 992.495779][T12941] __kmalloc_cache_noprof+0x1d9/0x390 [ 992.501159][T12941] nsim_fib_event_work+0x19c5/0x4130 [ 992.506436][T12941] process_scheduled_works+0xa63/0x1850 [ 992.511978][T12941] worker_thread+0x870/0xd30 [ 992.516558][T12941] kthread+0x2f0/0x390 [ 992.520616][T12941] ret_from_fork+0x4b/0x80 [ 992.525024][T12941] ret_from_fork_asm+0x1a/0x30 [ 992.529780][T12941] [ 992.532093][T12941] Memory state around the buggy address: [ 992.537711][T12941] ffff888058d4b180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.545759][T12941] ffff888058d4b200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 992.553811][T12941] >ffff888058d4b280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 992.561883][T12941] ^ [ 992.565936][T12941] ffff888058d4b300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.573984][T12941] ffff888058d4b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 992.582045][T12941] ================================================================== [ 992.615985][T12939] loop4: detected capacity change from 0 to 40427 [ 992.624130][T12941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 992.631352][T12941] CPU: 0 UID: 0 PID: 12941 Comm: syz.6.1442 Not tainted 6.12.0-next-20241125-syzkaller #0 [ 992.641237][T12941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 992.651290][T12941] Call Trace: [ 992.654559][T12941] [ 992.657482][T12941] dump_stack_lvl+0x241/0x360 [ 992.662161][T12941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.667352][T12941] ? __pfx__printk+0x10/0x10 [ 992.671935][T12941] ? preempt_schedule+0xe1/0xf0 [ 992.676775][T12941] ? vscnprintf+0x5d/0x90 [ 992.681098][T12941] panic+0x349/0x880 [ 992.684985][T12941] ? check_panic_on_warn+0x21/0xb0 [ 992.690089][T12941] ? __pfx_panic+0x10/0x10 [ 992.694499][T12941] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 992.700470][T12941] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 992.706793][T12941] ? print_report+0x502/0x550 [ 992.711472][T12941] check_panic_on_warn+0x86/0xb0 [ 992.716420][T12941] ? ovl_inode_upper+0x36/0x80 [ 992.721203][T12941] end_report+0x77/0x160 [ 992.725453][T12941] kasan_report+0x154/0x180 [ 992.729957][T12941] ? ovl_inode_upper+0x36/0x80 [ 992.734720][T12941] ovl_inode_upper+0x36/0x80 [ 992.739307][T12941] ovl_file_accessed+0x7e/0x370 [ 992.744154][T12941] ? __pfx_ovl_file_accessed+0x10/0x10 [ 992.749606][T12941] backing_file_mmap+0x1f8/0x260 [ 992.754546][T12941] ovl_mmap+0x1c9/0x220 [ 992.758740][T12941] ? __pfx_ovl_mmap+0x10/0x10 [ 992.763409][T12941] ? __pfx_ovl_file_accessed+0x10/0x10 [ 992.768861][T12941] ? __mas_set_range+0x133/0x3c0 [ 992.773794][T12941] __mmap_region+0x2204/0x2cd0 [ 992.778558][T12941] ? __pfx___mmap_region+0x10/0x10 [ 992.783661][T12941] ? __schedule+0x1858/0x4c30 [ 992.788345][T12941] ? arch_get_unmapped_area_topdown+0x28e/0xc50 [ 992.794623][T12941] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 992.801221][T12941] ? cap_mmap_addr+0x163/0x2c0 [ 992.805989][T12941] mmap_region+0x1d0/0x2c0 [ 992.810407][T12941] ? security_mmap_addr+0x6f/0x250 [ 992.815521][T12941] do_mmap+0x8f0/0x1000 [ 992.819680][T12941] ? __pfx_do_mmap+0x10/0x10 [ 992.824264][T12941] ? __pfx_down_write_killable+0x10/0x10 [ 992.829890][T12941] ? common_file_perm+0x1a6/0x210 [ 992.834920][T12941] vm_mmap_pgoff+0x214/0x430 [ 992.839512][T12941] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 992.844616][T12941] ? __fget_files+0x2a/0x410 [ 992.849205][T12941] ? __fget_files+0x395/0x410 [ 992.853877][T12941] ? __fget_files+0x2a/0x410 [ 992.858550][T12941] ksys_mmap_pgoff+0x4eb/0x720 [ 992.863315][T12941] ? __x64_sys_mmap+0x7f/0x140 [ 992.868069][T12941] do_syscall_64+0xf3/0x230 [ 992.872563][T12941] ? clear_bhb_loop+0x35/0x90 [ 992.877236][T12941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.883129][T12941] RIP: 0033:0x7f062b17e819 [ 992.887539][T12941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.907144][T12941] RSP: 002b:00007f062bed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 992.915558][T12941] RAX: ffffffffffffffda RBX: 00007f062b335fa0 RCX: 00007f062b17e819 [ 992.923522][T12941] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000000020ffc000 [ 992.931483][T12941] RBP: 00007f062b1f175e R08: 0000000000000006 R09: 0000000000000000 [ 992.939445][T12941] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 992.947412][T12941] R13: 0000000000000000 R14: 00007f062b335fa0 R15: 00007fff96873368 [ 992.955384][T12941] [ 992.958691][T12941] Kernel Offset: disabled [ 992.963001][T12941] Rebooting in 86400 seconds..